etherpad — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in etherpad, with AI-generated Chinese analysis, references, and POCs.

Vendor: ether

CVE ID	Title	CVSS	Severity	Published
CVE-2026-55086	Etherpad: Import/export use Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite CWE-59	4.2	Medium	2026-08-19
CVE-2026-55085	Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-lite CWE-79	9.6	Critical	2026-08-19
CVE-2026-55089	Etherpad: JWT `admin` claim presence-only check lets non-admin OAuth users invoke every Etherpad HTTP API endpoint CWE-863	9.9	Critical	2026-08-19
CVE-2026-55090	Etherpad: Stored XSS in HTML export via unescaped attribute-pool values CWE-79	5.3	Medium	2026-08-19
CVE-2026-55088	Etherpad: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token CWE-200	6.8	Medium	2026-08-19
CVE-2026-55087	Etherpad: x-proxy-path header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (open-redirect) CWE-79	6.1	Medium	2026-08-19

All 6 known CVE vulnerabilities affecting etherpad with full Chinese analysis, references, and POCs where available.