caido

Products

ProductCVEsExploitedLatest
caido5–Feb 13, 2026

Exploited and recent CVEs

  • CVE-2026-24853 High 8.1 Caido has an insufficient patch for DNS rebind leading to RCE 0.3%
  • CVE-2025-66025 Medium 4.3 Caido Improperly Handles External Links in Markdown 0.2%
  • CVE-2025-53834 Medium 6.3 Caido Toast Vulnerable to Reflected Cross-site Scripting 0.3%
  • CVE-2025-49004 High 7.5 Hijacking Caido instance during the initial setup via DNS Rebinding to achieve RCE 0.7%
  • CVE-2025-23039 Medium 5.2 Cross Site Scripting on URL decode Tooltip in Caido 0.2%