Fosrl

2 CVEs in 1 Fosrl product, including Pangolin. Newest: CVE-2026-72564 (2026-08-10). Severity, EPSS and public exploits for each.

Fosrl products with known CVEs

ProductCVEs
Pangolin2
Fosrl CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-72564Critical9.62026-08-10An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated remote attacker to authenticate to any resource in any organi…
CVE-2026-3209Medium6.32026-02-25A vulnerability has been found in fosrl Pangolin up to 1.15.4-s.3. This affects the function verifyRoleAccess/verifyApiKeyRoleAccess of the component Role Hand…