Veille CVE

Recherche « Arcadia Technology, LLC Crafty Controller »

3 CVE

Critique 2 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Arcadia Technology, LLC Crafty Controller » ✕
  1. CVE-2026-90821 5.4 Moyenne

    Arcadia Technology, LLC Crafty Controller

    An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input

  2. CVE-2026-18516 9.6 Critique

    Arcadia Technology, LLC Crafty Controller

    An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header injection

  3. CVE-2026-13716 9.1 Critique

    Arcadia Technology, LLC Crafty Controller · Craftycontrol crafty controller

    Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution.