Browse CVEs

MEDIUM 6.5 CVE-2026-32102 OliveTin gives access to predefined shell commands from a web interface. In 3000.10.2 and earlier, OliveTin’s live EventStream broadcasts execution e… Olivetin after 3000.10.2 Fix from $1,6002026-03-11 HIGH 8.5 CVE-2026-31817 OliveTin gives access to predefined shell commands from a web interface. Prior to 3000.11.2, when the saveLogs feature is enabled, OliveTin persists … Olivetin 3000.11.2+ Fix from $1,9502026-03-10 HIGH 8.8 CVE-2026-30223 OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, when JWT authentication is configured using eith… Olivetin 3000.11.1+ Fix from $1,9502026-03-06 MEDIUM 5.4 CVE-2026-30224 OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, OliveTin does not revoke server-side sessions wh… Olivetin 3000.11.1+ Fix from $1,6002026-03-06 HIGH 7.5 CVE-2026-28789 OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.10.3, an unauthenticated denial-of-service vulnerabili… Olivetin after 3000.10.2 Fix from $1,9502026-03-05 HIGH 7.5 CVE-2026-28790 OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.0, OliveTin allows an unauthenticated guest to term… Olivetin 3000.11.0+ Fix from $1,9502026-03-05 HIGH 7.5 CVE-2026-28342 OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.10.2, the PasswordHash API endpoint allows unauthentic… Olivetin 3000.10.2+ Fix from $1,9502026-03-05 CRITICAL 9.9 CVE-2026-27626 OliveTin gives access to predefined shell commands from a web interface. In versions up to and including 3000.10.0, OliveTin's shell mode safety chec… Olivetin after 3000.10.0 Fix from $2,3002026-02-25 MEDIUM 6.5 CVE-2025-50946 OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go. Olivetin No fix yet Fix from $1,6002025-08-13