CVE Intelligence

Kagilum vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Kagilum products: 2 record(s), with severity, exploitation and fixes.

Icescrum 2

Exploited only (KEV) →

CVE-2025-60786 High · 8.8 CWE-22 Dec 15, 2025
Path Traversal in Kagilum Icescrum
A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file.
CVE-2025-60785 High · 8.8 CWE-94 Nov 3, 2025
Code Injection in Kagilum Icescrum
A remote code execution (RCE) vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page.