What’s Vulnerable › Products

allinurl goaccess vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your allinurl goaccess version is affected

Latest allinurl goaccess vulnerabilities

• CVE-2026-55777 — GoAccess: Out-of-bounds heap read in parse_ios() via crafted User-Agent leads to remote crash/DoS (CVSS 5.3)
• CVE-2026-55768 — GoAccess WebSocket Server: Signed 32 bit truncation of the 64 bit frame length causes a remote pre-authentication denial of service (CVSS 8.7)
• CVE-2026-54715 — GoAccess: Heap Out-of-Bounds Write in parse_browser() (CVSS 7.1)