Evolution vulnerabilities
CVEs whose affected-version data names the Evolution package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-94216Medium· 4.3PoCA vulnerability was determined in ST Engineering iDirect iDX and Evo iDX
A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Executing a manipulation of the argument Success can lead to …
CVE-2026-94214Medium· 4.3PoCA vulnerability was found in ST Engineering iDirect iDX and Evo iDX
A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initia…
CVE-2026-88859Medium· 6.3A flaw was found in Evolution
A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending a specially crafted HTML email containing a spoofed vCard control. When a victim clicks on this control, Evolution's trusted JavaScript handler in…