CL
Product
CloudTAK
by dfpc-coe · last CVE Sep 30, 2026
2
CVEs
0
On KEV
7.6
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add CloudTAK to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-55177
7.6
0%
Sep 30
CloudTAK: Authenticated full-read SSRF in /api/esri* routes — user-controlled URL fetched with no IP-classification guard
Affected: < 13.10.0
CVE-2026-54546
5.0
0%
Sep 17
CloudTAK: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard
Affected: < 13.22.1
Showing 2