Pyload Ng

Vendor:

First CVE: Jan 5, 2023 · Active for 3 years

20
Total CVEs
More Total CVEs than 95% of tracked products
5.0
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 52% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Pyload Ng over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 5, 2023
3 years ago
Most Recent CVE
May 11, 2026
78 days ago

CVE Severity & Scoring

Pyload Ng20 CVEs
All CVEs353,173 CVEs
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network20 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low16 (80.0%)
High4 (20.0%)
Unknown0 (0.0%)
User Interaction
None15 (75.0%)
Unknown0 (0.0%)
Required5 (25.0%)
Privileges Required
Low10 (50.0%)
High0 (0.0%)
None10 (50.0%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (20 CVEs).

20 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-35459CRITICAL
pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, pyLoad has a server-side request forgery (SSRF) vulnerability. The fix for CVE-20
Apr 6, 20269.133NONO
CVE-2026-42313HIGH
pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SETTINGS)) in src/pyload/core/api
May 11, 20268.332NONO
CVE-2025-54802CRITICAL
pyLoad is the free and open-source Download Manager written in pure Python. In versions 0.5.0b3.dev89 and below, there is an opportunity for path traversal in pyLoad-ng CNL Bluepri
Aug 5, 20259.832NONO
CVE-2026-33509HIGH
pyLoad is a free and open-source download manager written in Python. From version 0.4.0 to before version 0.5.0b3.dev97, the set_config_value() API endpoint allows users with the n
Mar 24, 20268.831NONO
CVE-2026-35463HIGH
pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, the ADMIN_ONLY_OPTIONS protection mechanism restricts security-critical configura
Apr 7, 20268.830NONO
CVE-2026-33511CRITICAL
pyLoad is a free and open-source download manager written in Python. From version 0.4.20 to before version 0.5.0b3.dev97, the local_check decorator in pyLoad's ClickNLoad feature c
Mar 24, 20269.829NONO
CVE-2026-42315MEDIUM
pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, when passing a folder name in the set_package_data() API function call inside the data
May 11, 20266.528NONO
CVE-2026-35187HIGH
pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, the parse_urls API function in src/pyload/core/api/__init__.py fetches arbitrary
Apr 6, 20267.728NONO
CVE-2024-22416HIGH
pyLoad is a free and open-source Download Manager written in pure Python. The `pyload` API allows any API call to be made using GET requests. Since the session cookie is not set to
Jan 18, 20248.828NONO
CVE-2026-42312MEDIUM
pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SETTINGS)) in src/pyload/core/api
May 11, 20266.827NONO
View all 20 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (20 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (20 CVEs).

Media Mentions

Signals from CVEs in this product scope (20 CVEs).

Top CNAs Publishing CVEs For Pyload Ng

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
0.5.0b3.dev8919.81.2%00