Arcadia Technology, LLC Crafty Controller

• CVE-2026-18516 Critical 9.6 Improper Encoding or Escaping of Output in Crafty Controller 0.3%
• CVE-2026-90821 Medium 5.4 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller 0.2%
• CVE-2026-13716 Critical 9.1 Path Traversal: '.../...//' in Crafty Controller 0.8%
• CVE-2026-5652 Critical 9.0 Authorization Bypass Through User-Controlled Key in Crafty Controller 0.4%
• CVE-2026-0805 High 8.2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller 0.7%
• CVE-2026-0963 Critical 9.9 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller 0.7%
• CVE-2025-14700 Critical 9.9 Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller 6.6%
• CVE-2025-14701 High 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller 0.3%
• CVE-2025-5990 High 7.6 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller 0.3%
• CVE-2024-1064 High 7.5 Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4 0.8%