PatchTheCVElxdui vulnerabilities and fixes
Recent CVEs affecting lxdui, with upgrade or downgrade steps. 1 tracked.
lxdui has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-09-03. Highest priority: CVE-2021-40494 (score 59/100).
- CVE-2021-40494 CRITICAL 9.8 UPGRADE A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin
FAQ
How do I fix lxdui vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lxdui being exploited right now?
None of the tracked lxdui CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lxdui CVE should I patch first?
CVE-2021-40494 currently ranks highest (59/100): A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin .