AmentoTech
Vulnerability activity for AmentoTech: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 6
- Critical (CVSS 9+)
- 5
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 6
- Critical (CVSS 9+)
- 5
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 8.5HighOct 22, 2026AmentoTech Workreap Core SQL injectionCVE-2026-112822Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Workreap Core workreap_core allows Blind SQL Injection.This issue affects Workreap Core: from n/a before 3.4.4.
- 10.0CriticalOct 6, 2026AmentoTech Doctreat Core Privilege escalationCVE-2026-39773Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.
- 10.0CriticalOct 6, 2026AmentoTech Doctreat Path traversal / file handlingCVE-2026-39770Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.
- 9.9CriticalOct 6, 2026AmentoTech Workreap Core Path traversal / file handlingCVE-2026-39759Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.
- 9.9CriticalOct 6, 2026AmentoTech Taskbot Path traversal / file handlingCVE-2026-39757Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.
- 9.8CriticalOct 6, 2026AmentoTech Taskbot Privilege escalationCVE-2026-39753Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.
Top products
- Workreap Core2 CVEs in the last year, 1 critical
- Taskbot2 CVEs in the last year, 2 critical
- Doctreat Core1 CVE in the last year, 1 critical
- Doctreat1 CVE in the last year, 1 critical
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.