How many aces loris CVEs are in CISA KEV?

None of aces loris's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for aces loris vulnerabilities?

No aces loris CVEs currently have a tracked public exploit in this dataset.

Which versions of aces loris are affected?

38 distinct aces loris versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in aces loris CVEs?

aces loris's CVEs most often map to these CWE weakness types: CWE-552 (Files or Directories Accessible to External Parties), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).

What is the average severity of aces loris CVEs?

The average CVSS base score across aces loris's scored CVEs is 7.2.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

aces

11 CVEs

aces loris Vulnerabilities

Name: aces loris vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for loris by aces.

11

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.2

Avg CVSS

2026–2026

Last updated April 9, 2026

Overview

aces loris has 11 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting aces loris, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of aces loris's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High6

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of aces loris's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No aces loris CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every aces loris version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

>= 28.0.0, < 28.0.19 CVEs
28.0.09 CVEs
27.0.04 CVEs
27.0.14 CVEs
15.10-rc13 CVEs
15.10-rc23 CVEs
15.10-rc33 CVEs
15.10-rc43 CVEs
15.10-rc53 CVEs
15.43 CVEs
15.4k3 CVEs
17.0.03 CVEs
17.0.0-rc13 CVEs
23.0.73 CVEs
GitHubRelease-2013121113 CVEs
loris-14.103 CVEs
loris-14.123 CVEs
PublicRelease23 CVEs
< 27.0.32 CVEs
>= 20.0.0, < 27.0.32 CVEs
>= 27.0.0, < 27.0.22 CVEs
27.0.22 CVEs
< 26.0.51 CVE
>= , < 27.0.31 CVE
>= 15.10, < 27.0.31 CVE
>= 16.1.0, < 27.0.31 CVE
>= 21.0.0, < 27.0.31 CVE
>= 24.0.0, < 26.0.51 CVE
>= 24.0.0, < 27.0.31 CVE
26.0.01 CVE
26.0.11 CVE
26.0.21 CVE
26.0.31 CVE
26.0.41 CVE

Fixed in

f57f54b42a076bf53ba86e20d4dbf37f63538f588 CVEs
c9bb7c87b405b4e0892cda25ab5fc791bcd562f47 CVEs
409b3efd8b4f41d940860df4fd69a90485923e782 CVEs
9dfd069b099dc7475718f96d4ab4d0d854596ecd2 CVEs

Find a version

11 CVEs

Sort

LORIS has an open redirect field on login
CVE-2026-39985
Patch
CWE-601
Medium · CVSS 6.1
EPSS 0.2% (10th pct)2026-04-09
LORIS has a path traversal in FilesDownloadHandler
CVE-2026-35446
Patch
CWE-552
High · CVSS 8.6
EPSS 0.2% (14th pct)2026-04-08
LORIS has potential cross-site scripting in survey_accounts module
CVE-2026-35403
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (7th pct)2026-04-08
LORIS incorrectly trusts user input in publication module
CVE-2026-35400
Patch
CWE-59
Medium · CVSS 4.3
EPSS 0.2% (10th pct)2026-04-08
LORIS has potential cross-site scripting in help_editor module
CVE-2026-35169
Patch
CWE-552
High · CVSS 8.7
EPSS 0.2% (5th pct)2026-04-08
LORIS has incorrect access checks in document_repository
CVE-2026-35165
Patch
CWE-639
Medium · CVSS 6.5
EPSS 0.2% (6th pct)2026-04-08
LORIS has incorrect access checks in media module
CVE-2026-34985
Patch
CWE-639
Medium · CVSS 6.5
EPSS 0.2% (13th pct)2026-04-08
LORIS has a path traversal in static router
CVE-2026-34392
Patch
CWE-552
High · CVSS 7.5
EPSS 0.3% (16th pct)2026-04-08
LORIS has a SQL injection in MRI feedback popup
CVE-2026-33350
Patch
CWE-89
High · CVSS 7.5
EPSS 0.2% (16th pct)2026-04-08
LORIS vulnerable to path traversal in electrophysiology_browser
CVE-2026-26985
Patch
CWE-22
High · CVSS 8.1
EPSS 0.3% (25th pct)2026-02-25
LORIS media module vulnerable to remote code execution
CVE-2026-26984
Patch
CWE-434
High · CVSS 8.8
EPSS 0.7% (48th pct)2026-02-25

Common weakness types

The CWE weakness categories most often found in aces loris CVEs. Follow any weakness for its full explanation.

Other aces products

Browse vulnerabilities for other products by aces.

All aces vulnerabilities

Frequently asked questions

Common questions about aces loris vulnerabilities.

How many CVEs does aces loris have?: aces loris has 11 published CVE records since 2026.
How many aces loris CVEs are in CISA KEV?: None of aces loris's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for aces loris vulnerabilities?: No aces loris CVEs currently have a tracked public exploit in this dataset.
Which versions of aces loris are affected?: 38 distinct aces loris versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in aces loris CVEs?: aces loris's CVEs most often map to these CWE weakness types: CWE-552 (Files or Directories Accessible to External Parties), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).
What is the average severity of aces loris CVEs?: The average CVSS base score across aces loris's scored CVEs is 7.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track aces loris vulnerabilities

Monitor new aces loris vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing