Login Request a demo
SK
Product
Signal K Server
by Signalk · last CVE May 9, 2026
14
CVEs
0
On KEV
9.4
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 2High 8Medium 4Low 0
Severity
All severities14Critical2High8Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Signal K Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33950
9.4
0%
Apr 2
signalk-server: Privilege Escalation by Admin Role Injection via /enableSecurity
Affected: before 2.24.0; 2.24.0; 2.24.0; 2.24.0
CVE-2025-68620
9.1
1%
Jan 1
Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling
Affected: before 2.19.0; 2.19.0; 2.19.0; 2.19.0; 2.19.0
Showing 2