Eve-Ng

4 CVEs in 1 Eve-Ng product, including Eve-Ng. Newest: CVE-2025-67442 (2025-12-19). Severity, EPSS and public exploits for each.

Eve-Ng products with known CVEs

ProductCVEs
Eve-Ng4
Eve-Ng CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-67442High7.62025-12-19EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export lab files. This interface lacks effect…
CVE-2024-2391Low2.42024-03-12A vulnerability was found in EVE-NG 5.0.1-13 and classified as problematic. Affected by this issue is some unknown functionality of the component Lab Handler…
CVE-2022-31366High7.22022-10-20An arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2.0.3-112 Community allows attackers to execute arbitrary code v…
CVE-2022-27903High8.82022-05-04An OS Command Injection vulnerability in the configuration parser of Eve-NG Professional through 4.0.1-65 and Eve-NG Community through 2.0.3-112 allows a remot…