GROWI

3 known vulnerabilities in GROWI, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-100727 CVSS 6.9 medium An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public…
CVE-2026-68951 CVSS 6.9 medium GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an unauthenticated attacker could retrieve…
CVE-2026-53620 CVSS 5.3 medium GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookmark folder APIs. If this vulnerability…