What’s Vulnerable › Products

pwncollege dojo vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your pwncollege dojo version is affected

Latest pwncollege dojo vulnerabilities

• CVE-2026-25117 — pwn.college DOJO vulnerable to sandbox escape leading to arbitrary javascript execution (CVSS 8.3)
• CVE-2025-62376 — pwn.college DOJO vulnerable to improper authentication in workspace endpoint allowing unauthorized Windows VM access (CVSS 9.5)
• CVE-2025-24886 — pwn.college has Symlink LFI in Dojo repos (CVSS 7.7)
• CVE-2025-24885 — pwn.college has a XSS on dojo pages (CVSS 7.6)