What’s Vulnerable › Products

Morelitea initiative vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Morelitea initiative version is affected

Latest Morelitea initiative vulnerabilities

• CVE-2026-28276 — Initiative Allows Unauthenticated Access to Uploaded Documents via Public /uploads/ Endpoint (CVSS 7.5)
• CVE-2026-28275 — Initiative Vulnerable to Improper Session Invalidation (JWT Remains Valid) (CVSS 8.1)
• CVE-2026-28274 — Initiative Vulnerable to Token Theft via Stored XSS in Document Uploads (CVSS 8.7)