Advisories · Technology

zofe rapyd-admin.

Every CVE that names zofe rapyd-admin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110239 CVE record

CVSS 2.1 Low

Rapyd Admin before 9.20.0 Stored XSS via rich-text Component
- zofe rapyd-admin
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-110238 CVE record

CVSS 8.7 High

Rapyd Admin 9.0.0 before 9.20.0 Authorization Bypass via UsersModalEditEmbed Component
- zofe rapyd-admin
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-109567 CVE record

CVSS 8.6 High

Rapyd Admin from 9.0.0 before 9.20.0 Privilege Escalation via UsersEdit Component
- zofe rapyd-admin
- Privilege escalation
Not analysed yet 12 Oct 2026
CVE-2026-109566 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeeder
- zofe rapyd-admin
- Hard-coded credentials
Not analysed yet 12 Oct 2026
CVE-2026-109565 CVE record

CVSS 5.3 Medium

Rapyd Admin 9.4.0 before 9.20.0 Stored XSS via select-list Component
- zofe rapyd-admin
- Cross-site scripting (XSS)
Not analysed yet 12 Oct 2026