Cleanuparr

Products

ProductCVEsExploitedLatest
Cleanuparr3–May 12, 2026

Exploited and recent CVEs

  • CVE-2026-44184 High 8.0 Cleanuparr: Reflective CORS combined with trusted-network auth allows cross-origin admin API reads 0.1%
  • CVE-2026-44183 Critical 9.8 Cleanuparr: X-Forwarded-For leftmost parsing allows remote unauthenticated admin takeover when reverse-proxy mode is enabled 0.2%
  • CVE-2026-32702 Medium 6.9 Cleanuparr has Username Enumeration via Timing Attack 0.3%