Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-40071

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev97, the /json/package_order, /json/link_order, and /json/abort_link WebUI JSON endpoints enforce weaker permissions than the core API methods they invoke. This allows authenticated low-privileged users to execute MODIFY operations that should be denied by pyLoad's own permission model. This vulnerability is fixed in 0.5.0b3.dev97.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.0%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2026-40071
  • Pyload » Pyload » Version: N/A
    cpe:2.3:a:pyload:pyload:-
  • Pyload » Pyload » Version: 0.1
    cpe:2.3:a:pyload:pyload:0.1
  • Pyload » Pyload » Version: 0.1.1
    cpe:2.3:a:pyload:pyload:0.1.1
  • Pyload » Pyload » Version: 0.2
    cpe:2.3:a:pyload:pyload:0.2
  • Pyload » Pyload » Version: 0.2.1
    cpe:2.3:a:pyload:pyload:0.2.1
  • Pyload » Pyload » Version: 0.2.2
    cpe:2.3:a:pyload:pyload:0.2.2
  • Pyload » Pyload » Version: 0.3
    cpe:2.3:a:pyload:pyload:0.3
  • Pyload » Pyload » Version: 0.3.1
    cpe:2.3:a:pyload:pyload:0.3.1
  • Pyload » Pyload » Version: 0.3.2
    cpe:2.3:a:pyload:pyload:0.3.2
  • Pyload » Pyload » Version: 0.4
    cpe:2.3:a:pyload:pyload:0.4
  • Pyload » Pyload » Version: 0.4.1
    cpe:2.3:a:pyload:pyload:0.4.1
  • Pyload » Pyload » Version: 0.4.2
    cpe:2.3:a:pyload:pyload:0.4.2
  • Pyload » Pyload » Version: 0.4.20
    cpe:2.3:a:pyload:pyload:0.4.20
  • Pyload » Pyload » Version: 0.4.3
    cpe:2.3:a:pyload:pyload:0.4.3
  • Pyload » Pyload » Version: 0.4.4
    cpe:2.3:a:pyload:pyload:0.4.4
  • Pyload » Pyload » Version: 0.4.5
    cpe:2.3:a:pyload:pyload:0.4.5
  • Pyload » Pyload » Version: 0.4.6
    cpe:2.3:a:pyload:pyload:0.4.6
  • Pyload » Pyload » Version: 0.4.7
    cpe:2.3:a:pyload:pyload:0.4.7
  • Pyload » Pyload » Version: 0.4.8
    cpe:2.3:a:pyload:pyload:0.4.8
  • Pyload » Pyload » Version: 0.4.9
    cpe:2.3:a:pyload:pyload:0.4.9
  • Pyload » Pyload » Version: 0.5.0
    cpe:2.3:a:pyload:pyload:0.5.0
  • Pyload » Pyload » Version: 2023-01-05
    cpe:2.3:a:pyload:pyload:2023-01-05
  • Pyload » Pyload » Version: 2023-01-24
    cpe:2.3:a:pyload:pyload:2023-01-24
  • Pyload » Pyload » Version: 2023-01-25
    cpe:2.3:a:pyload:pyload:2023-01-25


Contact Us

Shodan ® - All rights reserved