{"items":[{"id":"CVE-2026-64838","published":"2026-09-10T13:51:07.290Z","updated":"2026-09-10T15:00:12.933Z","title":"ICEcoder through 8.1 Path Traversal via oldFileName Parameter","severity":"HIGH","score":8.7,"vendor":"ICEcoder","product":"ICEcoder","kev":false,"epss":0.0052,"kevAdded":null},{"id":"CVE-2026-64837","published":"2026-09-10T13:51:06.008Z","updated":"2026-09-10T14:55:28.809Z","title":"ICEcoder through 8.1 OS Command Injection via lib/properties.php","severity":"HIGH","score":8.7,"vendor":"ICEcoder","product":"ICEcoder","kev":false,"epss":0.00811,"kevAdded":null},{"id":"CVE-2026-64836","published":"2026-09-10T13:51:05.213Z","updated":"2026-09-10T14:05:49.993Z","title":"ICEcoder through 8.1 Path Traversal via Ineffective File::check() Confinement","severity":"HIGH","score":8.7,"vendor":"ICEcoder","product":"ICEcoder","kev":false,"epss":0.00606,"kevAdded":null},{"id":"CVE-2026-63722","published":"2026-08-19T19:13:45.090Z","updated":"2026-10-01T15:20:13.656Z","title":"ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php","severity":"HIGH","score":8.7,"vendor":"ICEcoder","product":"ICEcoder","kev":false,"epss":0.01329,"kevAdded":null},{"id":"CVE-2021-3862","published":"2022-01-17T13:50:10.000Z","updated":"2024-08-03T17:09:09.601Z","title":"Cross-site Scripting (XSS) - Reflected in icecoder/icecoder","severity":"MEDIUM","score":5.4,"vendor":"icecoder","product":"icecoder/icecoder","kev":false,"epss":0.00665,"kevAdded":null}]}