CVE-2018-9326: Etherpad

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

Etherpad 1.6.3 before 1.6.4 allows an attacker to execute arbitrary code.

Affected products

• Etherpad Etherpad: version 1.6.3 only

Published 2018-04-07. Last modified 2026-06-17.