evil-winrm vulnerabilities

CVEs whose affected-version data names the evil-winrm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-55201Medium· 6.8

4mo ago

Evil-WinRM - Path Traversal in download_dir() Function

Evil-WinRM through 3.9, fixed in commit 6ecd570, contains a path traversal vulnerability in the download_dir() function that allows a rogue or compromised remote Windows server to write files outside the intended download directory by re…

▾ SunlitHackplayers · evil-winrmEPSS 0.30%via CVEORG