According to its self-reported version number, Dynamicweb is prior to 9.12.8. It is, therefore, affected by an authentication bypass vulnerability due to a logic issue when determining if the setup phases of the product can be run again, allowing an unauthenticated attacker to add a new administrator user. Once authenticated as this administrator, an attacker can upload an executable file and achieve command execution.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
115739	Dynamicweb 9.7.x < 9.7.8 Authentication Bypass	Web App Scanning	Component Vulnerability	10/28/2026	10/28/2026	critical
115743	Dynamicweb 9.11.x / 9.12.x < 9.12.8 Authentication Bypass	Web App Scanning	Component Vulnerability	10/28/2026	10/28/2026	critical
115742	Dynamicweb 9.10.x < 9.10.18 Authentication Bypass	Web App Scanning	Component Vulnerability	10/28/2026	10/28/2026	critical
115737	Dynamicweb < 9.5.9 Authentication Bypass	Web App Scanning	Component Vulnerability	10/28/2026	10/28/2026	critical
115738	Dynamicweb 9.6.x < 9.6.16 Authentication Bypass	Web App Scanning	Component Vulnerability	10/28/2026	10/28/2026	critical
115740	Dynamicweb 9.8.x < 9.8.11 Authentication Bypass	Web App Scanning	Component Vulnerability	10/28/2026	10/28/2026	critical
115741	Dynamicweb 9.9.x < 9.9.8 Authentication Bypass	Web App Scanning	Component Vulnerability	10/28/2026	10/28/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical