Efwgrp

4 CVEs in 1 Efwgrp product, including Efw4.x. Newest: CVE-2026-44260 (2026-05-12). Severity, EPSS and public exploits for each.

Efwgrp products with known CVEs

ProductCVEs
Efw4.x4
Efwgrp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-44260High8.12026-05-12efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the readonly flag set on the <efw:elFinder> JSP tag is intended to prevent file modifications. Wh…
CVE-2026-44259Medium4.62026-05-12efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the previewServlet serves files with their detected MIME type based on file extension, without an…
CVE-2026-442582026-05-12efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the elfinder_checkRisk function validates target and targets for path traversal and home containm…
CVE-2026-442572026-05-12efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, efw.file.FileManager.unZip writes zip entries to disk using new File(baseDir, zipEntry.getName())…