Product by ETHER

    Etherpad

    7 known vulnerabilities in Etherpad (ETHER), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Etherpad (ETHER)
    CriticalCVE-2021-43802

    Admin privilege escalation and arbitrary code execution via malicious *.etherpad imports

    also in 2 other products

    		9.9
    CriticalCVE-2026-55089

    Etherpad: Incorrect Authorization

    		9.9
    CriticalCVE-2026-55085

    Etherpad: Cross-site Scripting

    		9.6
    MediumCVE-2026-55087

    ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header

    		6.1
    MediumCVE-2026-55088

    Etherpad: Authentication Bypass by Capture-replay

    		6.8
    MediumCVE-2026-55090

    Etherpad: Stored XSS in HTML export via unescaped attribute-pool values

    		—
    MediumCVE-2026-55086

    Etherpad: Link Following

    		4.2

    News

    All products by ETHER