weblate weblate

Name: weblate weblate
Brand: weblate

productUS

cpe:2.3:a:weblate:weblate:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

3critical4high9medium1low

updated 2026-10-28

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-24126US	critical9.1	0.52% (44th)	Exploit	5.16	2026-02-19	< 5.16
CVE-2022-23915US	high8.8	3.10% (88th)	—	4.11.1	2022-03-04	< 4.11.1
CVE-2017-5537US	medium5.3	2.31% (83rd)	—	no fix	2017-03-15	≤ 2.10
CVE-2025-68398US	critical9.1	0.79% (56th)	—	5.15.1	2025-12-18	< 5.15.1
CVE-2022-24710US	medium5.4	0.75% (55th)	—	4.11	2022-02-25	< 4.11
CVE-2026-33435US	—	0.71% (53rd)	—	5.17	2026-04-15	< 5.17
CVE-2026-34242US	—	0.46% (40th)	—	5.17	2026-04-15	< 5.17
CVE-2025-68279US	medium6.5	0.41% (35th)	—	5.15.1	2025-12-18	< 5.15.1
CVE-2025-61587US	medium6.1	0.39% (33rd)	—	5.13.3	2025-10-01	< 5.13.3
CVE-2026-34393US	—	0.39% (33rd)	—	5.17	2026-04-15	< 5.17
CVE-2026-21889US	high7.5	0.39% (33rd)	—	5.15.2	2026-01-14	< 5.15.2
CVE-2025-32021US	high7.5	0.38% (32nd)	—	5.11	2025-04-15	< 5.11
CVE-2026-41654US	high8.1	0.37% (31st)	—	5.17.1	2026-05-07	< 5.17.1
CVE-2025-64725US	critical9.8	0.35% (28th)	—	5.15	2025-12-15	< 5.15
CVE-2026-27457US	—OT elevated	0.35% (28th)	—	5.16.1	2026-02-26	< 5.16.1
CVE-2026-44263US	—	0.34% (27th)	—	5.17.1	2026-05-07	< 5.17.1
CVE-2026-40256US	—	0.32% (25th)	—	5.17	2026-04-15	< 5.17
CVE-2026-33220US	—	0.32% (25th)	—	5.17	2026-04-15	< 5.17
CVE-2025-49134US	medium5.3	0.32% (25th)	—	5.12	2025-06-16	< 5.12
CVE-2024-39303US	medium5.4	0.32% (25th)	—	5.6.2	2024-07-01	4.14 → 5.6.2
CVE-2025-58352US	medium6.5	0.29% (21st)	—	5.13.1	2025-09-05	< 5.13.1
CVE-2026-44264US	—	0.27% (20th)	—	5.17.1	2026-05-07	< 5.17.1
CVE-2026-39845US	—	0.27% (20th)	—	5.17	2026-04-15	< 5.17
CVE-2025-67715US	—	0.27% (19th)	—	5.15	2025-12-16	< 5.15
CVE-2026-41519US	medium5.4	0.27% (19th)	—	5.17.1	2026-05-07	< 5.17.1
CVE-2025-47951US	—	0.27% (18th)	—	5.12	2025-06-16	< 5.12
CVE-2025-67492US	—	0.26% (17th)	—	5.15	2025-12-16	< 5.15
CVE-2026-34244US	—	0.25% (17th)	—	5.17	2026-04-15	< 5.17
CVE-2025-66407US	medium5.0	0.24% (15th)	—	5.15	2025-12-16	< 5.15
CVE-2026-33440US	—	0.24% (15th)	—	5.17	2026-04-15	< 5.17
CVE-2026-33214US	—OT elevated	0.24% (15th)	—	5.17	2026-04-15	< 5.17
CVE-2026-33212US	—	0.22% (13th)	—	5.17	2026-04-15	< 5.17
CVE-2025-64326US	low3.5	0.20% (10th)	—	5.14.1	2025-11-06	< 5.14.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
CWE-918Server-Side Request Forgery (SSRF)5 CVEs
CWE-284Improper Access Control3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type2 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')2 CVEs
CWE-613Insufficient Session Expiration2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan