What’s Vulnerable › Products

shlinkio Shlink vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your shlinkio Shlink version is affected

Latest shlinkio Shlink vulnerabilities

• CVE-2026-92760 — Shlink through 5.1.6 Mercure Token Authorization Bypass (CVSS 6.5)
• CVE-2026-18738 — Shlink CSV Formula Injection via Visit Export CLI (CVSS 4.7)
• CVE-2026-18737 — Shlink Blind SQL Injection via tags/stats orderBy Parameter (CVSS 6.5)
• CVE-2026-18736 — Shlink Server-Side Request Forgery via Short URL Title Auto-Resolution (CVSS 5.0)