Browse CVEs

CRITICAL 9.1 CVE-2026-13716 Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary path… Crafty Controller 4.10.8+ Fix from $5,7502026-08-11 CRITICAL 9.0 CVE-2026-5652 An insecure direct object reference vulnerability in the Users API component of Crafty Controller allows a remote, authenticated attacker to perform … Crafty Controller 4.10.4+ Fix from $2,3002026-04-21 HIGH 8.8 CVE-2026-0963 An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to p… Crafty Controller Mitigation only Fix from $1,9502026-01-30 HIGH 8.8 CVE-2026-0805 An input neutralization vulnerability in the Backup Configuration component of Crafty Controller allows a remote, authenticated attacker to perform f… Crafty Controller 4.8.0+ Fix from $1,9502026-01-30 CRITICAL 9.9 CVE-2025-14700EPSS 7% An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remot… Crafty Controller Mitigation only Fix from $2,3002025-12-17 HIGH 7.1 CVE-2025-14701 An input neutralization vulnerability in the Server MOTD component of Crafty Controller allows a remote, unauthenticated attacker to perform stored X… Crafty Controller 4.6.2+ Fix from $1,9502025-12-17 MEDIUM 5.4 CVE-2025-5990 An input neutralization vulnerability in the Server Name form and API Key form components of Crafty Controller allows a remote, authenticated attacke… Crafty Controller 4.3.2 / 4.4.10+ Fix from $1,6002025-06-15 HIGH 7.5 CVE-2024-1064 A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticated attacker to trigger a Denia… Crafty Controller after 4.2.2 Fix from $1,9502024-02-03