Skip to content
FFlagForgeCTF
Products
| Product | CVEs | Exploited | Latest |
| flagForge | 8 | – | Jan 8, 2026 |
Exploited and recent CVEs
-
CVE-2026-21868
High 7.5
Flag Forge has ReDoS Vulnerability in User Profile Lookup API
0.3%
-
CVE-2025-61777
Critical 9.4
FlagForge Allows Unauthenticated Badge Template API Access
0.5%
-
CVE-2025-59932
High 8.6
FlagForgeCTF Unauthenticated Resource Modification/Deletion
0.4%
-
CVE-2025-59843
Medium 6.9
FlagForgeCTF Exposes User Emails via Public /api/user/[username] API
0.4%
-
CVE-2025-59841
Critical 9.8
FlagForgeCTF's Improper Session Handling Allows Access After Logout
0.4%
-
CVE-2025-59833
High 7.5
FlagForgeCTF Hint Exposure via API
0.3%
-
CVE-2025-59827
High 8.2
FlagForgeCTF is Missing Authorization in main-v2
0.4%
-
CVE-2025-59826
High 7.6
FlagForgeCTF Vulnerable to Unauthorized Problem Creation
0.2%