v2board vulnerabilities and fixes

Recent CVEs affecting v2board, with upgrade or downgrade steps. 3 tracked.

v2board has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-05-01. Highest priority: CVE-2026-37503 (score 31/100).

• CVE-2026-37505 MEDIUM 4.9 UPGRADE SQL Injection via ORDER BY clause in V2Board thru 1.7.4
• CVE-2026-37504 MEDIUM 5.3 UPGRADE Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4
• CVE-2026-37503 MEDIUM 6.9 UPGRADE Cross-Site Scripting (XSS) in V2Board thru 1.7.4

FAQ

How do I fix v2board vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is v2board being exploited right now?

None of the tracked v2board CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which v2board CVE should I patch first?

CVE-2026-37503 currently ranks highest (31/100): Cross-Site Scripting (XSS) in V2Board thru 1.7.4.

RSS feed for v2board · ← Back to latest CVEs