SU
Product
SurfSense
3
CVEs
0
On KEV
7.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add SurfSense to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102243 | 7.4 | Sep 29 | MODSetter SurfSense MCP Connector Integration test command injection Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3 |
| CVE-2026-102245 | 7.3 | Sep 29 | MODSetter SurfSense circleback Endpoint circleback_webhook_route.py missing authentication Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3 |
| CVE-2026-102244 | 4.3 | Sep 29 | MODSetter SurfSense Document Export Feature editor_routes.py server-side request forgery Affected: 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; 0.0.6; +30 more |
Showing 3