Ragic vulnerabilities
Published CVEs affecting Ragic products: 4 record(s), with severity, exploitation and fixes.
CVE-2026-15553
Medium · 5.3
CWE-434 Jul 13, 2026
Ragic｜Enterprise Cloud Database - Arbitrary File Upload
Enterprise Cloud Database developed by Ragic has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload malicious files and make them available for users to download.
CVE-2026-15552
Medium · 6.1
CWE-79 Jul 13, 2026
Ragic｜Enterprise Cloud Database - Stored Cross-Site Scripting
Enterprise Cloud Database developed by Ragic has a Stored Cross-Site Scripting vulnerability, allowing unauthenticated remote attackers to inject persistent JavaScript code executed in users' browsers upon page load.
CVE-2025-15016
Critical · 9.8
CWE-321 Dec 22, 2025
Ragic｜Enterprise Cloud Database - Hard-coded Cryptographic Key
Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information and log into the system as any user.
CVE-2025-15015
High · 7.5
CWE-23 Dec 22, 2025
Ragic｜Enterprise Cloud Database - Arbitrary File Read
Enterprise Cloud Database developed by Ragic has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.