Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Crafty Controller — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Crafty Controller, with AI-generated Chinese analysis, references, and POCs.

Vendor: Arcadia Technology, LLC

CVE IDTitleCVSSSeverityPublished
CVE-2026-5652 Authorization Bypass Through User-Controlled Key in Crafty Controller CWE-639 9.0 Critical2026-04-21
CVE-2026-0805 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller CWE-22 8.2 High2026-01-30
CVE-2026-0963 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller CWE-22 9.9 Critical2026-01-30
CVE-2025-14700 Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller CWE-1336 9.9 Critical2025-12-17
CVE-2025-14701 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller CWE-79 7.1 High2025-12-17
CVE-2025-5990 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller CWE-79 7.6 High2025-06-15
CVE-2024-1064 Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4 CWE-644 7.5 High2024-02-03

All 7 known CVE vulnerabilities affecting Crafty Controller with full Chinese analysis, references, and POCs where available.