Advisories · Technology

forceworkbench.

Every CVE that names forceworkbench among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-35178 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Workbench Affected by Remote Code Execution (RCE) via Malicious Cookie in Timezone Conversion
- forceworkbench
- Code injection
Not analysed yet 6 Apr 2026
CVE-2026-34951 CVE record

CVSS 5.1 Medium

Reflected XSS in footer.php in Workbench Allows Attackers to Hijack Authenticated Sessions
- forceworkbench
- Cross-site scripting (XSS)
Not analysed yet 6 Apr 2026