BBunkerity

Products

Exploited and recent CVEs

• CVE-2026-75514 Medium 5.9 BunkerWeb: rDNS bypass via missing forward-confirmation (FCrDNS) in blacklist, greylist, and antibot 0.6%
• CVE-2026-54728 Medium 6.1 bunkerweb: Improper Input Validation and Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in BunkerWeb 0.4%
• CVE-2026-61718 Medium 5.4 bunkerweb: Read-only Web UI users can delete job cache files due to missing authorization on /cache/ routes 0.4%
• CVE-2025-8066 Medium 4.8 Bunker Web 1.6.2 - Uncontrolled external site redirect 0.5%
• CVE-2024-53264 Medium 5.1 Open Redirect Vulnerability in Loading Page in bunkerweb 0.8%