Login Request a demo
SI
Product
signalk-server
by SignalK · last CVE Oct 28, 2026
17
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 3High 8Medium 6Low 0
Severity
All severities17Critical3High8Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add signalk-server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-118690
New
9.8–Oct 28
Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs
Affected: before 2.33.0
CVE-2026-33950
9.4
0%
Apr 2
signalk-server: Privilege Escalation by Admin Role Injection via /enableSecurity
Affected: < 2.24.0-beta.4
CVE-2025-68620
9.1
1%
Jan 1
Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling
Affected: < 2.19.0
Showing 3