Pandax maintains a narrowly scoped product line centered on its core platform, which has surfaced vulnerabilities across application-layer input handling and file management. The recurring exposure pattern reflects input-validation weaknesses including path traversal, SQL injection, and unrestricted file upload, each of which can undermine authentication, data integrity, and system access. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Pandax over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-2565CRITICAL A vulnerability was found in PandaXGO PandaX up to 20240310. It has been classified as critical. Affected is an unknown function of the file /apps/system/router/upload.go of the co | Mar 17, 2024 | 9.8 | 27 | NO | NO |
CVE-2024-2563CRITICAL A vulnerability has been found in PandaXGO PandaX up to 20240310 and classified as critical. This vulnerability affects the function DeleteImage of the file /apps/system/router/upl | Mar 17, 2024 | 9.8 | 26 | NO | NO |
CVE-2024-2562CRITICAL A vulnerability, which was classified as critical, was found in PandaXGO PandaX up to 20240310. This affects the function InsertRole of the file /apps/system/services/role_menu.go. | Mar 17, 2024 | 9.8 | 25 | NO | NO |
CVE-2024-2564HIGH A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical. This issue affects the function ExportUser of the file /apps/system/api/user.go. The manipul | Mar 17, 2024 | 7.3 | 21 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Pandax.
Media articles that mention a CVE ID that affects a product developed by Pandax — matched by CVE ID, not by vendor name.