CVE Tools
Track your stack

Pyload-ng-project

9 CVEs tracked since 2023. Since Jan 2023, none of them reached CISA KEV.

Pyload-ng-project CVEs per month

Jan 2023 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Pyload-ng-project CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2023-0130
2023-023 or fewer
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-064 or fewer
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-0460
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Pyload-ng-project's monthly top three, with their CVEs summed over those months.

  1. Pyload-ng92 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Pyload-ng-project.

  1. CVE-2026-42315pyLoad: Path Traversal via Package Folder Name in set_package_data8.1
  2. CVE-2026-42314pyLoad: Path Traversal via Package Folder Name6.5
  3. CVE-2026-42312pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verification6.8
  4. CVE-2026-42313pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy8.3
  5. CVE-2026-40594pyLoad: Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition)4.8
  6. CVE-2026-35592pyLoad has an Incomplete Tar Path Traversal Fix in UnTar._safe_extractall via os.path.commonprefix Bypass5.3
  7. CVE-2026-35586Authorization Bypass for SSL Certificate/Key Configuration Due to Option Name Mismatch in pyload-ng6.8
  8. CVE-2026-35463pyLoad has Improper Neutralization of Special Elements used in an OS Command8.8
  9. CVE-2026-35459pyLoad has SSRF fix bypass via HTTP redirect9.1
  10. CVE-2026-35187pyLoad has SSRF in parse_urls API endpoint via unvalidated URL parameter7.7
  11. CVE-2026-33511pyload-ng: Authentication Bypass via Host Header Injection in ClickNLoad9.8
  12. CVE-2026-33509pyload-ng: SETTINGS Permission Users Can Achieve Remote Code Execution via Unrestricted Reconnect Script Configuration7.5
  13. CVE-2026-33314pyload-ng: Improper Authentication and Origin Validation Error6.5
  14. CVE-2026-32808pyLoad: Arbitrary File Deletion via Path Traversal during Encrypted 7z Password Verification8.1
  15. CVE-2026-29778pyLoad: Arbitrary File Write via Path Traversal in edit_package()7.1

The record

Peak rank
#192 in Apr 2026
Busiest month shown
Apr 2026, 6 CVEs
Months with a KEV entry
0 since Jan 2023
Monthly snapshots
2 since 2023
Pyload-ng-project's full record, month by month