MagicMirrorOrg vulnerabilities
5 published CVEs name MagicMirrorOrg among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-63640
MagicMirror socket payload secret placeholder expansion can disclose SECRET_* environment variables
MagicMirrorOrg · MagicMirror
Medium4.3 - CVE-2026-63642
MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery
MagicMirrorOrg · MagicMirror
Medium6.3 - CVE-2026-63643
MagicMirror: ssrf calendar .js
MagicMirrorOrg · MagicMirror
Medium6.3 - CVE-2026-63641
MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions
MagicMirrorOrg · MagicMirror
Low2.3 - CVE-2026-42281
MagicMirror²: Unauthenticated SSRF via /cors endpoint
MagicMirrorOrg · MagicMirror
Critical9.2