CR
Vendor
Craftycontrol
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-13716 | CC Crafty Controller Craftycontrol | 9.1 | Aug 11 | Path Traversal: '.../...//' in Crafty Controller |
| CVE-2026-5652 | CC Crafty Controller Craftycontrol | 9.0 | Apr 21 | Authorization Bypass Through User-Controlled Key in Crafty Controller |
| CVE-2026-0805 | CC Crafty Controller Craftycontrol | 8.8 | Jan 30 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller |
| CVE-2026-0963 | CC Crafty Controller Craftycontrol | 8.8 | Jan 30 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller |
| CVE-2025-14700 | CC Crafty Controller Craftycontrol | 9.9 | Dec 17 | Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller |
| CVE-2025-14701 | CC Crafty Controller Craftycontrol | 7.1 | Dec 17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller |
| CVE-2025-5990 | CC Crafty Controller Craftycontrol | 5.4 | Jun 15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller |
| CVE-2024-1064 | CC Crafty Controller Craftycontrol | 7.5 | Feb 3 | A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) condition… |