volmarg has 3 CVEs on record. 3 were published in the last 90 days. The median CVSS is 7.2 (high).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.2
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Worst active — by depth score
CVE-2026-73328High· 7.2Volmarg Personal Management System through 2.1.0 Unrestricted File Upload RCE via /upload/send/40CVE-2026-118755High· 7.2Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder Path40CVE-2026-40526Medium· 6.5Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/{path} endpoint36
volmarg vulnerabilities
CVEs affecting volmarg, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-73328High· 7.2Volmarg Personal Management System through 2.1.0 Unrestricted File Upload RCE via /upload/send/
Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows authenticated users to upload PHP files via the /upload/send/ endpoint. Attackers can submit base64 fileContent with a .php f…
CVE-2026-118755High· 7.2Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder Path
Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability that allows authenticated users to execute shell commands via unescaped folder paths in the storage module's tree command. Attackers can crea…
CVE-2026-40526Medium· 6.5Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/{path} endpoint
Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/{path} endpoint. The path route par…