What’s Vulnerable › Products

Forceu Gokapi vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your Forceu Gokapi version is affected

Latest Forceu Gokapi vulnerabilities

• CVE-2026-30961 — Gokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Upload (CVSS 4.3)
• CVE-2026-30955 — Gokapi vulnerable to DoS in E2E Metadata Parser (CVSS 6.5)
• CVE-2026-30943 — Gokapi has Privilege Escalation in File Replace (CVSS 4.1)
• CVE-2026-29084 — Gokapi: CSRF in Login Endpoint (CVSS 4.6)
• CVE-2026-29061 — Gokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotion (CVSS 5.4)
• CVE-2026-29060 — Gokapi: Privilege escalation with auth token (CVSS 5.0)
• CVE-2026-28683 — Gokapi: Stored XSS in SVG Hotlinks (CVSS 8.7)
• CVE-2026-28682 — Gokapi: Data Leak in Upload Status Stream (CVSS 6.4)
• CVE-2025-48495 — Gokapi has stored XSS vulnerability in friendly name for API keys (CVSS 5.4)
• CVE-2025-48494 — Gokapi vulnerable to stored XSS via uploading file with malicious file name (CVSS 5.4)