Login Request a demo
CA
Product
caddy
by caddyserver · last CVE Sep 23, 2026
On CISA KEVExploited in the wild
23
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 5High 7Medium 9Low 2
Severity
All severities23Critical5High7Medium9Low2
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add caddy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45692
3.8
0%
Jun 23
Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization
Affected: >= 2.4.0, < 2.11.3
CVE-2018-19148
3.7
1%
Nov 10
Caddy through 0.11.0 sends incorrect certificates for certain invalid requests, making it easier for attackers to enumerate hostnames
Affected: through 0.11.0
Showing 2