P
Vendor security profile
pyload
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit4
Patch rate%0
Avg. CVSS6.4
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
2
2
CVE KEV
CVE severity distribution
5toplam CVE
High1 (20%)
Medium4 (80%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%80
Public exploit
0Patch available
0Partial
2Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
5.3
CVE-2026-75597
pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo
P
Patch status unknownEPSS %0
6.5
CVE-2026-48484
pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination
P
Patch status unknownEPSS %0
6.5
CVE-2026-48987
pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager
P
WorkaroundEPSS %0
4.9
CVE-2026-48737
pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs
P
WorkaroundEPSS %0
9.1
CVE-2026-35459
Server-side request forgery in Pyload Ng Project
PP
Patch verifiedEPSS %0
7.7
CVE-2026-35187
Server-side request forgery in Pyload Ng Project
PP
Patch verifiedEPSS %0
8.8
CVE-2023-47890
Path traversal in Pyload
P
Patch status unknownEPSS %1