Olajowon Loggrove vulnerabilities

CVE-2025-26014 [CRITICAL] CWE-94 CVE-2025-26014: A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute ar A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter.

CVE-2025-1229 [MEDIUM] CWE-77 CVE-2025-1229: A vulnerability classified as critical was found in olajowon Loggrove up to e428fac38cc480f011afcb1d A vulnerability classified as critical was found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Affected by this vulnerability is an unknown functionality of the file /read/?page=1&logfile=eee&match=. The manipulation of the argument path leads to os command injection. The attack can be launched remotely. The exploit has been disc

CVE-2025-26013 [HIGH] CWE-540 CVE-2025-26013: An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.

CVE-2025-26047 [MEDIUM] CWE-89 CVE-2025-26047: Loggrove v1.0 is vulnerable to SQL Injection in the read.py file. Loggrove v1.0 is vulnerable to SQL Injection in the read.py file.

CVE-2025-1228 [MEDIUM] CWE-22 CVE-2025-1228: A vulnerability classified as problematic has been found in olajowon Loggrove up to e428fac38cc480f0 A vulnerability classified as problematic has been found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Affected is an unknown function of the file /read/?page=1&logfile=LOG_Monitor of the component Logfile Update Handler. The manipulation of the argument path leads to path traversal. It is possible to launch the attack remotely.