Skip to content

Icecoder · product

Icecoder

9 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

  1. ICEcoder v8.1 allows attackers to execute a directory traversal.CVE-2022-34026Icecoder · CVSS 7.5 · 1.8% likely

    CWE-22

  2. ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.phpCVE-2026-63722ICEcoder · CVSS 9.8 · 1.3% likely

    CWE-306

  3. In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] variable. As a result,…CVE-2021-32106Icecoder · 0.9% likely

    CWE-79

  4. ICEcoder through 8.1 OS Command Injection via lib/properties.phpCVE-2026-64837ICEcoder · CVSS 8.8 · 0.8% likely

    CWE-78

  5. ICEcoder through 8.1 Path Traversal via Ineffective File::check() ConfinementCVE-2026-64836ICEcoder · CVSS 8.8 · 0.6% likely

    CWE-22

  6. ICEcoder through 8.1 Path Traversal via oldFileName ParameterCVE-2026-64838ICEcoder · CVSS 8.3 · 0.5% likely

    CWE-22

  7. ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php.CVE-2024-41373Icecoder · CVSS 6.3 · 0.4% likely

    CWE-22

  8. ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/terminal-xhr.phpCVE-2024-41375Icecoder · CVSS 6.1 · 0.3% likely

    CWE-79

  9. ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.phpCVE-2024-41374Icecoder · CVSS 6.1 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in