Arelle vulnerabilities

CVEs whose affected-version data names the Arelle package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-42796Critical· 9.8PoC

6mo ago

Arelle < 2.39.10 Unauthenticated RCE via /rest/configure

Arelle before 2.39.10 contains an unauthenticated remote code execution vulnerability in the /rest/configure REST endpoint that accepts a plugins query parameter and forwards it to the plugin manager without authentication or authorizati…

▾ AbyssalArelle · ArelleEPSS 2.7%via CVEORG