CVE-2022-45477: Telepad-App Telepad

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Telepad allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any previous authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

• Telepad-App Telepad: up to and including 1.0.7

Published 2022-12-05. Last modified 2026-06-17.