DynamicWeb vulnerabilities

🔔 Create alert RSS

Published CVEs affecting DynamicWeb products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-2731 Critical · 10.0 CWE-22 Feb 19, 2026

Unauthenticated RCE in Dynamicweb 9 and Dynamicweb 8

Path traversal and content injection in JobRunnerBackground.aspx in DynamicWeb 8 (all) and 9 (<9.19.7 and <9.20.3) allows unauthenticated attackers to execute code via simple web requests