CC
Product
Crafty Controller
8
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 1Low 0
Watch
Add Crafty Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-0805 | 8.8 | Jan 30 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller Affected: 4.5.0 before 4.8.0 |
| CVE-2026-0963 | 8.8 | Jan 30 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller Affected: 4.7.0 |
| CVE-2024-1064 | 7.5 | Feb 3 | A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) condition… Affected: 4.0.0 through 4.2.2 |
| CVE-2025-14701 | 7.1 | Dec 17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller Affected: before 4.6.2 |
Showing 4