Cctfer-io

Products

Exploited and recent CVEs

• CVE-2026-116683 High 7.1 CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values 0.4%
• CVE-2026-32768 High 7.9 Chall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespace 0.3%
• CVE-2026-32771 High 8.8 Monitoring is vulnerable to Archive Slip due to missing checks in sanitization 0.7%
• CVE-2026-32769 High 7.1 Fullchain's Invalid NetworkPolicy enables a malicious actor to pivot into another namespace 0.5%
• CVE-2026-32805 High 8.3 Romeo is vulnerable to Archive Slip due to missing checks in sanitization 0.5%
• CVE-2026-32737 High 7.9 Romeo's invalid NetworkPolicy enables a malicious actor to pivot into another namespace 0.4%
• CVE-2026-32720 High 7.1 Improper Access Control in github.com/ctfer-io/monitoring 0.3%
• CVE-2025-53634 High 8.7 Chall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks 0.5%
• CVE-2025-53633 High 8.7 Chall-Manager's scenario decoding process does not check for zip bombs 0.5%
• CVE-2025-53632 High 8.8 Chall-Manager's scenario decoding process does not check for zip slips 0.8%