← Back

Pangolin

pangolin

Vendor: Pangolin • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Pangolin
1Pangolin
Jun 17, 2026
Dec 30, 2025
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access Pangolin resource via Insecure Default Configuration
1Pangolin
1Pangolin
Jun 17, 2026
Dec 29, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component