What’s Vulnerable › Products

piccolo-orm piccolo_admin vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your piccolo-orm piccolo_admin version is affected

Latest piccolo-orm piccolo_admin vulnerabilities

• CVE-2026-55485 — Piccolo Admin: Privilege escalation - admin to superuser via session-token disclosure in GET /api/tables/sessions/. (CVSS 8.8)
• CVE-2024-30248 — Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page (CVSS 7.7)