CVE Tools
Track your stack

Part-db

9 CVEs tracked since 2026. Since Oct 2026, none of them reached CISA KEV.

Part-db CVEs per month

Oct 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Part-db CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-1090

Products

The products that kept showing up in Part-db's monthly top three, with their CVEs summed over those months.

  1. Part-db-server91 month

Latest CVEs

The 13 most recently published vulnerabilities affecting Part-db.

  1. CVE-2026-86055Part-DB: Password Reset Link Poisoning via Host Header Injection leads to pre-authentication Account Takeover—
  2. CVE-2026-86020Part-DB: Spreadsheet Formula Injection in XLSX Part Exports4.6
  3. CVE-2026-86019Part-DB: Attachment Size Limit Bypass via API Base64 Upload—
  4. CVE-2026-86018Part-DB: Authenticated Disk Exhaustion via Unbounded Server-Side Attachment Downloads—
  5. CVE-2026-59188Part-DB: SVG Sanitization Bypass via Extension Spoofing Leads to Stored XSS in Attachment Viewer5.4
  6. CVE-2026-55600Part-DB: Stored HTML injection in BOM validation results via unescaped Part name—
  7. CVE-2026-54631Part-DB: Hardcoded APP_SECRET enables forged remember-me cookie6.3
  8. CVE-2026-54630Part-DB: Authenticated RCE via .phar attachment upload served from public/media9.6
  9. CVE-2026-54615Part-DB: Stored XSS / HTML injection in activity-log Extra column via unsanitized CollectionElementDeleted element name (sibling-sanitizer gap)—
  10. CVE-2019-25432Part-DB 0.4 Authentication Bypass via login.php7.5
  11. CVE-2025-55194Part-DB Persistent Denial of Service via Uncaught Exception from Misleading File Extension in Avatar Upload5.7
  12. CVE-2023-26042HTML/XSS injection possibilities in Part-DB 6.1
  13. CVE-2022-0848OS Command Injection in part-db/part-db9.8

The record

Peak rank
#192 in Oct 2026
Busiest month shown
Oct 2026, 9 CVEs
Months with a KEV entry
0 since Oct 2026
Monthly snapshots
1 since 2026
Part-db's full record, month by month