CryptPad

Products

Exploited and recent CVEs

• CVE-2026-26028 Medium 6.1 CryptPad: Sanitizer Bypass in Diffmarked.js Allows Arbitrary HTML Injection and Potential XSS 0.2%
• CVE-2025-51846 High 7.5 CryptPad unbounded WebSocket frame flood 0.6%
• CVE-2025-49591 High 7.4 CryptPad 2FA Bypass Vulnerability 0.5%
• CVE-2025-49590 Low 2.9 CryptPad Dom-Based Cross-Site Scripting (XSS) Vulnerability 0.3%