CT
Vendor
ctfer-io
10
CVEs
0
On KEV
1
New 30D
Products
TE7.1
terraform-provider-ctfd
ctfer-io
1 CVEs0 on KEV1 new
CH9.9
chall-manager
ctfer-io
4 CVEs0 on KEV0 new
MO9.8
monitoring
ctfer-io
2 CVEs0 on KEV0 new
RO10.0
romeo
ctfer-io
2 CVEs0 on KEV0 new
FU9.8
fullchain
ctfer-io
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116683 New | TE terraform-provider-ctfd ctfer-io | 7.1 | Oct 27 | CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values |
| CVE-2026-32768 | CH chall-manager ctfer-io | 9.9 | Mar 20 | Chall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespace |
| CVE-2026-32771 | MO monitoring ctfer-io | 9.8 | Mar 20 | Monitoring is vulnerable to Archive Slip due to missing checks in sanitization |
| CVE-2026-32769 | FU fullchain ctfer-io | 9.8 | Mar 20 | Fullchain's Invalid NetworkPolicy enables a malicious actor to pivot into another namespace |
| CVE-2026-32805 | RO romeo ctfer-io | 7.5 | Mar 18 | Romeo is vulnerable to Archive Slip due to missing checks in sanitization |
| CVE-2026-32737 | RO romeo ctfer-io | 10.0 | Mar 18 | Romeo's invalid NetworkPolicy enables a malicious actor to pivot into another namespace |
| CVE-2026-32720 | MO monitoring ctfer-io | 7.1 | Mar 13 | Improper Access Control in github.com/ctfer-io/monitoring |
| CVE-2025-53634 | CH Chall-manager Ctfer-io | 7.5 | Jul 10 | Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player |
| CVE-2025-53633 | CH Chall-manager Ctfer-io | 9.8 | Jul 10 | Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player |
| CVE-2025-53632 | CH Chall-manager Ctfer-io | 9.1 | Jul 10 | Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player |