CVE-2024-28265: Ibos

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

IBOS v4.5.5 has an arbitrary file deletion vulnerability via \system\modules\dashboard\controllers\LoginController.php.

Affected products

• Ibos Ibos: version 4.5.5 only

Published 2024-11-01. Last modified 2026-06-17.