Kohler Hotcrp
3 CVEs affecting Kohler Hotcrp. Latest disclosed: 2026-01-30. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-23836 | Critical | 9.9 | 2026-01-19 | HotCRP is conference review software. A problem introduced in April 2024 in version 3.1 led to inadequately sanitized code generation for HotCRP formulas which… |
CVE-2026-25156 | High | 7.3 | 2026-01-30 | HotCRP is conference review software. HotCRP versions from October 2025 through January 2026 delivered documents of all types with inline Content-Disposition… |
CVE-2026-23878 | Medium | 6.5 | 2026-01-19 | HotCRP is conference review software. Starting in commit aa20ef288828b04550950cf67c831af8a525f508 and prior to commit ceacd5f1476458792c44c6a993670f02c984b4a0… |