CVE-2026-6570
published 2026-04-19CVE-2026-6570: A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file…
PriorityP416low2.7CVSS 3.1
AVNACLPRHUINSUCNILAN
EPSS
0.30%
21.7th percentile
A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file /app/controller/systemMember.class.php. Performing a manipulation of the argument path results in authorization bypass. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected
53 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
| kodcloud | kodexplorer | — | — |
CVSS provenance
nvdv3.12.7LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
nvdv4.02.0LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.03.3LOWAV:N/AC:L/Au:M/C:N/I:P/A:N
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jfxq-p7rj-52hh: A security flaw has been discovered in kodcloud KodExplorer up to 4
ghsa_unreviewed·2026-04-19
CVE-2026-6570 [MEDIUM] CWE-285 GHSA-jfxq-p7rj-52hh: A security flaw has been discovered in kodcloud KodExplorer up to 4
A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file /app/controller/systemMember.class.php. Performing a manipulation of the argument path results in authorization bypass. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
VulDB
kodcloud KodExplorer up to 4.52 systemMember.class.php initInstall path authorization
vuldb·2026-04-18
CVE-2026-6570 [LOW] kodcloud KodExplorer up to 4.52 systemMember.class.php initInstall path authorization
A vulnerability classified as problematic has been found in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file /app/controller/systemMember.class.php. Performing a manipulation of the argument path results in authorization bypass.
This vulnerability was named CVE-2026-6570. The attack may be initiated remotely. In addition, an exploit is available.
The vendor was contacted early about this disclosure but did not respond in any way.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-04-19
Published