Fengoffice
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 3
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, Fengoffice recorded 3 security vulnerabilities in the last 90 days across 1 products, including 0 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Feng Office had the most security vulnerabilities in the Fengoffice ecosystem, with 3 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-124500Fengoffice Feng Office File FilesController.class.php upload_document_image server-side request forgeryCVE-2026-124499Fengoffice Feng Office Translation Tool ToolController.class.php write_translations code injectionCVE-2026-90497Fengoffice Feng Office Task Title Output add_task.php getTitle cross site scriptingCVE-2026-90496Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injectionCVE-2026-90495Fengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection5 Results | Page 1 of 1
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |