CCrawl4AI

Products

Exploited and recent CVEs

• CVE-2026-56260 Critical 9.1 Crawl4AI - Arbitrary File Write via output_path Parameter 0.6%
• CVE-2026-56259 High 8.2 Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution 0.4%
• CVE-2026-56261 High 8.6 Crawl4AI - Server-Side Request Forgery via Webhook URLs 0.5%
• CVE-2026-56264 High 8.1 Crawl4AI - Arbitrary JavaScript Execution via /execute_js Endpoint 0.5%
• CVE-2026-56262 Medium 6.5 Crawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API Server 0.8%
• CVE-2026-56263 Medium 6.1 Crawl4AI - Stored Cross-Site Scripting in Monitor Dashboard 0.3%
• CVE-2026-56258 High 8.1 Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU 0.9%
• CVE-2026-56266 High 8.6 Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints 0.5%
• CVE-2026-56265 Critical 9.8 Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key 2.6%