CR
Vendor
Crawl4AI
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-56260 | CR Crawl4AI Crawl4AI | 9.1 | Jul 12 | Crawl4AI - Arbitrary File Write via output_path Parameter |
| CVE-2026-56259 | CR Crawl4AI Crawl4AI | 8.2 | Jul 12 | Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution |
| CVE-2026-56261 | CR Crawl4AI Crawl4AI | 7.5 | Jul 10 | Crawl4AI - Server-Side Request Forgery via Webhook URLs |
| CVE-2026-56264 | CR Crawl4AI Crawl4AI | 6.1 | Jun 30 | Crawl4AI - Arbitrary JavaScript Execution via /execute_js Endpoint |
| CVE-2026-56262 | CR Crawl4AI Crawl4AI | 6.5 | Jun 24 | Crawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API Server |
| CVE-2026-56263 | CR Crawl4AI Crawl4AI | 6.1 | Jun 23 | Crawl4AI - Stored Cross-Site Scripting in Monitor Dashboard |
| CVE-2026-56258 | CR Crawl4AI Crawl4AI | 8.1 | Jun 23 | Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU |
| CVE-2026-56266 | CR Crawl4AI Crawl4AI | 8.6 | Jun 22 | Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints |
| CVE-2026-56265 | CR Crawl4AI Crawl4AI | 9.8 | Jun 21 | Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key |