What’s Vulnerable › Products

DumbWareio DumbDrop vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your DumbWareio DumbDrop version is affected

Latest DumbWareio DumbDrop vulnerabilities

• CVE-2025-47929 — DumbDrop vulnerable to DOM XSS via file upload (CVSS 2.1)
• CVE-2025-24971 — OS Command Injection endpoint '/upload/init' parameter 'filename' (RCE) in DumpDrop (CVSS 9.5)
• CVE-2025-24891 — Dumb Drop has an arbitrary file overwrite and path traversal for root shell (CVSS 9.6)