FI
Vendor
firecrawl
5
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116066 New | FI Firecrawl Firecrawl | 6.8 | Oct 25 | Firecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright Service |
| CVE-2026-85606 | FI firecrawl-mcp-server firecrawl | 7.5 | Sep 4 | firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath |
| CVE-2026-72904 | FI firecrawl firecrawl | 9.3 | Aug 10 | Firecrawl: Arbitrary file read via JSON Schema $ref expansion |
| CVE-2026-32857 | FI Firecrawl Firecrawl | 8.6 | Mar 26 | Firecrawl Playwright Service SSRF Protection Bypass via Missing Post-Redirect Validation |
| CVE-2025-57818 | FI firecrawl firecrawl | 6.3 | Aug 26 | Firecrawl SSRF Vulnerability via malicious webhook |
