{"schema_version":1,"title":"NamelessMC vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in NamelessMC: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-40571, was published on 2 June 2026.","url":"https://junglewise.ai/threats/technologies/namelessmc","json_url":"https://junglewise.ai/threats/technologies/namelessmc.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/namelessmc","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":7,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":7},"latest":[{"cve":"CVE-2026-40571","cvss":5.3,"slug":"cve-2026-40571-namelessmc-missing-authorization-for-reactions-on-private-profile","title":"NamelessMC missing authorization for reactions on private profile posts","severity":"info","exploited":false,"published_at":"2026-06-02T17:16:29.02+00:00","url":"https://junglewise.ai/threats/cve-2026-40571-namelessmc-missing-authorization-for-reactions-on-private-profile"},{"cve":"CVE-2026-40314","cvss":6.9,"slug":"cve-2026-40314-namelessmc-missing-authorization-for-private-profile-post","title":"NamelessMC missing authorization for private profile post reactions","severity":"info","exploited":false,"published_at":"2026-06-02T17:16:28.867+00:00","url":"https://junglewise.ai/threats/cve-2026-40314-namelessmc-missing-authorization-for-private-profile-post"},{"cve":"CVE-2026-35447","cvss":5.3,"slug":"cve-2026-35447-namelessmc-authorization-bypass-in-profile-wall-posts","title":"NamelessMC authorization bypass in profile wall posts","severity":"info","exploited":false,"published_at":"2026-06-02T17:16:28.427+00:00","url":"https://junglewise.ai/threats/cve-2026-35447-namelessmc-authorization-bypass-in-profile-wall-posts"},{"cve":"CVE-2026-35443","cvss":5.3,"slug":"cve-2026-35443-namelessmc-missing-authorization-for-forum-post-reactions","title":"NamelessMC missing authorization for forum post reactions","severity":"info","exploited":false,"published_at":"2026-06-02T17:16:28.283+00:00","url":"https://junglewise.ai/threats/cve-2026-35443-namelessmc-missing-authorization-for-forum-post-reactions"},{"cve":"CVE-2026-34460","cvss":5.4,"slug":"cve-2026-34460-namelessmc-oauth-login-csrf-in-callback-handling","title":"NamelessMC OAuth login CSRF in callback handling","severity":"medium","exploited":false,"published_at":"2026-06-02T16:16:36.933+00:00","url":"https://junglewise.ai/threats/cve-2026-34460-namelessmc-oauth-login-csrf-in-callback-handling"},{"cve":"CVE-2026-33398","cvss":7.1,"slug":"cve-2026-33398-namelessmc-improper-authorization-in-forum-get-quotes-endpoint","title":"NamelessMC improper authorization in forum get_quotes endpoint","severity":"info","exploited":false,"published_at":"2026-06-02T16:16:36.457+00:00","url":"https://junglewise.ai/threats/cve-2026-33398-namelessmc-improper-authorization-in-forum-get-quotes-endpoint"},{"cve":"CVE-2026-32250","cvss":4.3,"slug":"cve-2026-32250-namelessmc-reflected-xss-in-queries-user-endpoint","title":"NamelessMC reflected XSS in queries user endpoint","severity":"medium","exploited":false,"published_at":"2026-06-02T14:16:50.467+00:00","url":"https://junglewise.ai/threats/cve-2026-32250-namelessmc-reflected-xss-in-queries-user-endpoint"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"NamelessMC","slug":"namelessmc","vendor":{"name":"NamelessMC","slug":"namelessmc","url":"https://junglewise.ai/threats/vendors/namelessmc"},"aliases":[],"category":"cms","homepage":"https://namelessmc.com/","repo_url":"https://github.com/NamelessMC/Nameless","description":"NamelessMC is a free, open-source website software for Minecraft servers.","url":"https://junglewise.ai/threats/technologies/namelessmc"},"most_severe":[{"cve":"CVE-2026-34460","cvss":5.4,"slug":"cve-2026-34460-namelessmc-oauth-login-csrf-in-callback-handling","title":"NamelessMC OAuth login CSRF in callback handling","severity":"medium","exploited":false,"published_at":"2026-06-02T16:16:36.933+00:00","url":"https://junglewise.ai/threats/cve-2026-34460-namelessmc-oauth-login-csrf-in-callback-handling"},{"cve":"CVE-2026-32250","cvss":4.3,"slug":"cve-2026-32250-namelessmc-reflected-xss-in-queries-user-endpoint","title":"NamelessMC reflected XSS in queries user endpoint","severity":"medium","exploited":false,"published_at":"2026-06-02T14:16:50.467+00:00","url":"https://junglewise.ai/threats/cve-2026-32250-namelessmc-reflected-xss-in-queries-user-endpoint"},{"cve":"CVE-2026-33398","cvss":7.1,"slug":"cve-2026-33398-namelessmc-improper-authorization-in-forum-get-quotes-endpoint","title":"NamelessMC improper authorization in forum get_quotes endpoint","severity":"info","exploited":false,"published_at":"2026-06-02T16:16:36.457+00:00","url":"https://junglewise.ai/threats/cve-2026-33398-namelessmc-improper-authorization-in-forum-get-quotes-endpoint"},{"cve":"CVE-2026-40314","cvss":6.9,"slug":"cve-2026-40314-namelessmc-missing-authorization-for-private-profile-post","title":"NamelessMC missing authorization for private profile post reactions","severity":"info","exploited":false,"published_at":"2026-06-02T17:16:28.867+00:00","url":"https://junglewise.ai/threats/cve-2026-40314-namelessmc-missing-authorization-for-private-profile-post"},{"cve":"CVE-2026-40571","cvss":5.3,"slug":"cve-2026-40571-namelessmc-missing-authorization-for-reactions-on-private-profile","title":"NamelessMC missing authorization for reactions on private profile posts","severity":"info","exploited":false,"published_at":"2026-06-02T17:16:29.02+00:00","url":"https://junglewise.ai/threats/cve-2026-40571-namelessmc-missing-authorization-for-reactions-on-private-profile"},{"cve":"CVE-2026-35447","cvss":5.3,"slug":"cve-2026-35447-namelessmc-authorization-bypass-in-profile-wall-posts","title":"NamelessMC authorization bypass in profile wall posts","severity":"info","exploited":false,"published_at":"2026-06-02T17:16:28.427+00:00","url":"https://junglewise.ai/threats/cve-2026-35447-namelessmc-authorization-bypass-in-profile-wall-posts"},{"cve":"CVE-2026-35443","cvss":5.3,"slug":"cve-2026-35443-namelessmc-missing-authorization-for-forum-post-reactions","title":"NamelessMC missing authorization for forum post reactions","severity":"info","exploited":false,"published_at":"2026-06-02T17:16:28.283+00:00","url":"https://junglewise.ai/threats/cve-2026-35443-namelessmc-missing-authorization-for-forum-post-reactions"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}