Vendor

    ETHER

    10 known vulnerabilities in products by ETHER, 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in ETHER
    CriticalCVE-2021-43802

    Admin privilege escalation and arbitrary code execution via malicious *.etherpad imports

    also in 1 other product

    		9.9
    CriticalCVE-2026-55089

    Etherpad: Incorrect Authorization

    		9.9
    CriticalCVE-2026-55085

    Etherpad: Cross-site Scripting

    		9.6
    MediumCVE-2026-55087

    ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header

    		6.1
    CriticalCVE-2009-10007

    ETHER Catalyst::Plugin::Authentication: Session Fixation

    		9.1
    MediumCVE-2026-55088

    Etherpad: Authentication Bypass by Capture-replay

    		6.8
    MediumCVE-2026-55090

    Etherpad: Stored XSS in HTML export via unescaped attribute-pool values

    		—
    HighCVE-2025-40920

    ETHER Catalyst::Authentication::Credential::HTTP: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

    		8.6
    MediumCVE-2025-40907

    ETHER FCGI: Heap-based Buffer Overflow

    also in 1 other product

    		5.3
    MediumCVE-2026-55086

    Etherpad: Link Following

    		4.2

    News

    Products

    Products by ETHER
    Etherpad60