What’s Vulnerable › Products

rommapp romm vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your rommapp romm version is affected

Latest rommapp romm vulnerabilities

• CVE-2025-65097 — Insecure Direct Object Reference (IDOR) Allows Unauthorized Deletion of User Collections (CVSS 6.5)
• CVE-2025-65096 — RomM Insecure Direct Object Reference (IDOR) Allows Unauthorized Access to Private Collections (CVSS 4.3)
• CVE-2025-65027 — RomM Chained XSS and CSRF Vulnerabilities Enable Admin Account Takeover (CVSS 7.6)
• CVE-2025-54071 — RomM's authenticated arbitrary file write vulnerability can lead to Remote Code Execution (CVSS 9.4)
• CVE-2025-53908 — RomM vulnerable to Authenticated Path Traversal (CVSS 8.3)