Vendor

    TDuckCloud

    18 known vulnerabilities in products by TDuckCloud, 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in TDuckCloud
    CriticalCVE-2025-57631

    Tduck: SQL Injection

    		9.8
    HighCVE-2026-92567

    TDuck survey form through 5.0 Unauthorized Data Modification

    		6.5
    HighCVE-2026-92602

    TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL

    		7.1
    MediumCVE-2026-100306

    TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement

    		5.3
    HighCVE-2026-109164

    TDuckCloud Tduck-survey-form: Authorization Bypass Through User-Controlled Key

    		7.1
    MediumCVE-2026-100304

    TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check

    		5.3
    MediumCVE-2026-95829

    TDuckCloud Tduck-platform: SQL Injection

    		6.3
    CriticalCVE-2025-7888

    TDuckCloud tduck-platform UserFormDataMapper.java UserFormDataMapper sql injection

    		6.3
    MediumCVE-2026-100303

    TDuck survey form through 6.0 Missing Authorization in Form Theme Management Endpoints

    		5.4
    MediumCVE-2026-111621

    TDuck Survey Form through 5.3 Missing Authorization via /user/form/setting/{key}

    		4.3
    MediumCVE-2026-100305

    TDuck survey form through 6.0 Fill-In Restriction Bypass via Authenticated Submission Endpoint

    		4.3
    MediumCVE-2026-109165

    TDuckCloud Tduck-survey-form: Authorization Bypass Through User-Controlled Key

    		4.3
    MediumCVE-2026-109167

    TDuckCloud Tduck-survey-form: Authorization Bypass Through User-Controlled Key

    		4.3
    HighCVE-2023-51805

    TDuckCloud Tduck-platform: SQL Injection

    		6.5
    CriticalCVE-2024-8692

    TDuckCloud TDuckPro password recovery

    		5.3
    HighCVE-2025-8756

    TDuckCloud tduck-platform manage preHandle improper authorization

    		6.3
    CriticalCVE-2025-0558

    TDuckCloud tduck-platform QueryProThemeRequest.java QueryProThemeRequest sql injection

    		6.3
    MediumCVE-2023-37733

    TDuckCloud Tduck-platform: Unrestricted File Upload

    		6.1

    Products

    Products by TDuckCloud
    Tduck-survey-form100
    Tduck-platform60