What’s Vulnerable › Products

pandora-analysis pandora vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your pandora-analysis pandora version is affected

Latest pandora-analysis pandora vulnerabilities

• CVE-2026-88069 — Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis (CVSS 9.3)
• CVE-2026-75531 — Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora (CVSS 7.0)
• CVE-2026-75529 — Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora (CVSS 6.9)
• CVE-2026-74767 — Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb (CVSS 8.7)
• CVE-2026-74764 — Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora (CVSS 10.0)