ctfer-io vulnerabilities
10 published CVEs name ctfer-io among the affected products.
- 10Published CVEs10 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical10 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-116683
CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
ctfer-io · terraform-provider-ctfd
High7.1 - CVE-2026-32768
Chall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespace
ctfer-io · chall-manager
High7.9 - CVE-2026-32771
Monitoring is vulnerable to Archive Slip due to missing checks in sanitization
ctfer-io · monitoring
High8.8 - CVE-2026-32769
Fullchain's Invalid NetworkPolicy enables a malicious actor to pivot into another namespace
ctfer-io · fullchain
High7.1 - CVE-2026-32805
Romeo is vulnerable to Archive Slip due to missing checks in sanitization
ctfer-io · romeo
High8.3 - CVE-2026-32737
Romeo's invalid NetworkPolicy enables a malicious actor to pivot into another namespace
ctfer-io · romeo
High7.9 - CVE-2026-32720
Improper Access Control in github.com/ctfer-io/monitoring
ctfer-io · monitoring
High7.1 - CVE-2025-53634
Chall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks
ctfer-io · chall-manager
High8.7 - CVE-2025-53633
Chall-Manager's scenario decoding process does not check for zip bombs
ctfer-io · chall-manager
High8.7 - CVE-2025-53632
Chall-Manager's scenario decoding process does not check for zip slips
ctfer-io · chall-manager
High8.8