Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

CTFd vulnerabilities

3 published CVEs name CTFd among the affected products.

Newest CVEs

  • CVE-2026-121562

    CTFd 3.1.0 before 3.8.7 Information Disclosure via /api/v1/teams Endpoint

    CTFd · CTFd

    Medium6.9
  • CVE-2024-11717

    Tokens in CTFd used for account activation and password resetting can be used interchangeably for these operations. When used, they are sent to the server as a…

    CTFd · CTFd

    Medium6.3
  • CVE-2024-11716

    While assignment of a user to a team (bracket) in CTFd should be possible only once, at the registration, a flaw in logic implementation allows an…

    CTFd · CTFd

    Medium5.3