CVE-2026-6568
published 2026-04-19CVE-2026-6568: A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file…
PriorityP349high7.3CVSS 3.1
AVNACLPRNUINSUCLILAL
EPSS
0.51%
39.8th percentile
A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.class.php of the component Public Share Handler. This manipulation of the argument path causes path traversal. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected
53 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
CVSS provenance
nvdv3.17.3HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
nvdv4.05.5MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rgfh-mp7v-25f9: A vulnerability was determined in kodcloud KodExplorer up to 4
ghsa_unreviewed·2026-04-19
CVE-2026-6568 [MEDIUM] CWE-22 GHSA-rgfh-mp7v-25f9: A vulnerability was determined in kodcloud KodExplorer up to 4
A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.class.php of the component Public Share Handler. This manipulation of the argument path causes path traversal. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
VulDB
kodcloud KodExplorer up to 4.52 Public Share share.class.php initShareOld path path traversal
vuldb·2026-04-18
CVE-2026-6568 [CRITICAL] kodcloud KodExplorer up to 4.52 Public Share share.class.php initShareOld path path traversal
A vulnerability marked as critical has been reported in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.class.php of the component Public Share Handler. This manipulation of the argument path causes path traversal.
This vulnerability is handled as CVE-2026-6568. The attack can be initiated remotely. Additionally, an exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-04-19
Published