Casdoor

Products

Product	CVEs	Exploited	Latest
Casdoor	15	–	Sep 15, 2026

CVE-2026-91998 Critical 9.9 Casdoor through 4.4.0 Cross-Organization User Administration via /api/mcp 0.6%
CVE-2026-90942 Critical 9.6 Casdoor through 4.4.0 Private Key Exposure via Certificate Endpoints 0.3%
CVE-2026-15630 Critical 9.9 CVE-2026-15630 0.5%
CVE-2026-9098 Critical 9.1 CVE-2026-9098 0.2%
CVE-2026-9097 Critical 9.8 CVE-2026-9097 0.4%
CVE-2026-9096 High 7.5 CVE-2026-9096 0.3%
CVE-2026-9095 High 8.1 CVE-2026-9095 0.3%
CVE-2026-9094 Critical 9.8 CVE-2026-9094 0.4%
CVE-2026-9093 Critical 9.8 CVE-2026-9093 0.4%
CVE-2026-9092 Critical 9.1 CVE-2026-9092 0.3%
CVE-2026-9091 Medium 5.3 CVE-2026-9091 0.3%
CVE-2026-9090 Critical 9.1 CVE-2026-9090 0.2%
CVE-2026-6815 Medium 5.9 CVE-2026-6815 0.5%
CVE-2024-41658 Medium 6.1 GHSL-2024-036: Reflected XSS in QrCodePage.js 0.4%
CVE-2024-41657 High 8.1 GHSL-2024-035: Casdoor CORS misconfiguration 0.8%