Skip to content
Ccaido
Products
| Product | CVEs | Exploited | Latest |
| caido | 5 | – | Feb 13, 2026 |
Exploited and recent CVEs
-
CVE-2026-24853
High 8.1
Caido has an insufficient patch for DNS rebind leading to RCE
0.3%
-
CVE-2025-66025
Medium 4.3
Caido Improperly Handles External Links in Markdown
0.2%
-
CVE-2025-53834
Medium 6.3
Caido Toast Vulnerable to Reflected Cross-site Scripting
0.3%
-
CVE-2025-49004
High 7.5
Hijacking Caido instance during the initial setup via DNS Rebinding to achieve RCE
0.7%
-
CVE-2025-23039
Medium 5.2
Cross Site Scripting on URL decode Tooltip in Caido
0.2%