What’s Vulnerable › Products

aces Loris vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your aces Loris version is affected

Latest aces Loris vulnerabilities

• CVE-2026-39985 — LORIS has an open redirect field on login (CVSS 6.1)
• CVE-2026-35446 — LORIS has a path traversal in FilesDownloadHandler (CVSS 8.6)
• CVE-2026-35403 — LORIS has potential cross-site scripting in survey_accounts module (CVSS 5.4)
• CVE-2026-35400 — LORIS incorrectly trusts user input in publication module (CVSS 4.3)
• CVE-2026-35169 — LORIS has potential cross-site scripting in help_editor module (CVSS 5.4)
• CVE-2026-35165 — LORIS has incorrect access checks in document_repository (CVSS 6.5)
• CVE-2026-34985 — LORIS has incorrect access checks in media module (CVSS 6.5)
• CVE-2026-34392 — LORIS has a path traversal in static router (CVSS 7.5)
• CVE-2026-33350 — LORIS has a SQL injection in MRI feedback popup (CVSS 7.5)
• CVE-2026-26985 — LORIS vulnerable to path traversal in electrophysiology_browser (CVSS 6.5)
• CVE-2026-26984 — LORIS media module vulnerable to remote code execution (CVSS 8.8)