Advisories · Technology

THM-Health PILOS.

Every CVE that names THM-Health PILOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-71555 CVE record

CVSS 4.1 Medium

PILOS: Reverse tabnabbing in room description
- THM-Health PILOS
- CWE-1022
Not analysed yet 6 Aug 2026
CVE-2026-22800 CVE record

CVSS 2.4 Low

PILOS affected by a CSRF via GET request allows unintentional termination of all active video conferences
- THM-Health PILOS
- Cross-site request forgery (CSRF)
Not analysed yet 12 Jan 2026
CVE-2025-62781 CVE record

CVSS 5.0 Medium

PILOS is missing session regeneration after password change
- THM-Health PILOS
- Authentication bypass
Not analysed yet 27 Oct 2025
CVE-2025-62524 CVE record

CVSS 5.3 Medium

PILOS Exposes PHP version
- THM-Health PILOS
- Information disclosure
Not analysed yet 27 Oct 2025
CVE-2025-62523 CVE record

CVSS 6.3 Medium

PILOS Misconfigured the Access-Control-Allow-Origin Header
- THM-Health PILOS
- CWE-942
Not analysed yet 27 Oct 2025
CVE-2023-47107 CVE record

CVSS 8.8 High

PILOS account takeover through password reset poisoning
- THM-Health PILOS
- CWE-20
- CWE-640
Not analysed yet 8 Nov 2023