Sploitus

17 exploited vulnerabilities in Nicegui

Vulnerabilities with publicly known exploits

Vendors
Nicegui, Ag Grid, Echarts, Unknown, Leaflet, Xterm
With known exploits
17
Affected Zauberzeug Nicegui versions
< 3.7.0, 3.4.0, 3.5.0

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2024-32005
CVSS 8.2 HIGH 2024-04-12FIX AVAILABLE
CVE-2026-45553
CVSS 7.5 HIGH 2026-05-14FIX AVAILABLE
CVE-2026-39844
CVSS 7.5 HIGH 2026-04-08FIX AVAILABLE
CVE-2026-33332
CVSS 7.5 HIGH 2026-03-19FIX AVAILABLE
CVE-2026-25732 2 exploits
CVSS 7.5 HIGH 2026-02-05FIX AVAILABLE
📄 NiceGUI 3.6.1 Path TraversalNiceGUI 3.6.1 - Path Traversal
CVE-2025-66645
CVSS 7.5 HIGH 2025-12-09FIX AVAILABLE
CVE-2025-21618
CVSS 7.5 HIGH 2025-01-06FIX AVAILABLE
CVE-2026-21873
CVSS 7.2 HIGH 2026-01-08FIX AVAILABLE
CVE-2026-27156
CVSS 6.1 MEDIUM 2026-02-24FIX AVAILABLE
CVE-2026-25516
CVSS 6.1 MEDIUM 2026-02-05FIX AVAILABLE
CVE-2026-21872
CVSS 6.1 MEDIUM 2026-01-08FIX AVAILABLE
CVE-2026-21871
CVSS 6.1 MEDIUM 2026-01-08FIX AVAILABLE
CVE-2025-66470 1 exploit
CVSS 6.1 MEDIUM 2025-12-08FIX AVAILABLE
Exploit for CVE-2025-66470
CVE-2025-66469
CVSS 6.1 MEDIUM 2025-12-08FIX AVAILABLE
CVE-2025-53354
CVSS 6.1 MEDIUM 2025-10-03FIX AVAILABLE
CVE-2026-45554
CVSS 5.3 MEDIUM 2026-05-18FIX AVAILABLE
CVE-2026-21874
CVSS 5.3 MEDIUM 2026-01-08FIX AVAILABLE