Login Request a demo
SU
Product
SurfSense
by MODSetter · last CVE Sep 29, 2026
3
CVEs
0
On KEV
7.4
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add SurfSense to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102243
7.4
1%
Sep 29
MODSetter SurfSense MCP Connector Integration test command injection
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3
CVE-2026-102245
7.3
0%
Sep 29
MODSetter SurfSense circleback Endpoint circleback_webhook_route.py missing authentication
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3
Showing 2