FI
Vendor
firecrawl
2 products with CVEs on record
5
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116066
New
FI
Firecrawl
Firecrawl
6.8
0%
Oct 25Firecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright Service
CVE-2026-85606
FI
firecrawl-mcp-server
firecrawl
7.5
1%
Sep 4firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath
CVE-2026-72904
FI
firecrawl
firecrawl
9.3
0%
Aug 10Firecrawl: Arbitrary file read via JSON Schema $ref expansion
CVE-2026-32857
FI
Firecrawl
Firecrawl
8.6
0%
Mar 26Firecrawl Playwright Service SSRF Protection Bypass via Missing Post-Redirect Validation
CVE-2025-57818
FI
firecrawl
firecrawl
6.3
0%
Aug 26Firecrawl SSRF Vulnerability via malicious webhook