Login Request a demo
AR
Product
arcane
by getarcaneapp · last CVE Oct 16, 2026
13
CVEs
0
On KEV
9.9
Max CVSS
3
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 2High 7Medium 4Low 0
Severity
All severities13Critical2High7Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add arcane to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-86114
6.5
0%
Sep 5
Arcane before 2.0.0 Missing Administrator Authorization on the Compose Template Mutation Endpoints
Affected: 1.19.1 before 2.0.0
CVE-2026-40242
6.5
1%
Apr 10
Arcane Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint
Affected: < 1.17.3
CVE-2026-45626
6.3
0%
May 29
Arcane: OS Command Injection in Volume Browser ListDirectory via path query parameter
Affected: <= 1.18.1
CVE-2026-96628
4.3
0%
Oct 16
Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`
Affected: < 2.11.0
Showing 4