Log in Start free

daptin

Products

ProductCVEsExploitedLatest
daptin4–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-62160 High 8.7 Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware 0.4%
  • CVE-2026-72575 Critical 9.1 daptin - Authentication Bypass via Null Owner Permission Check on usergroup Objects 0.5%
  • CVE-2026-44349 High 7.1 Daptin fuzzy search injects unvalidated column name into raw SQL 0.3%
  • CVE-2026-41422 High 8.3 Daptin vulnerable to SQL injection via unvalidated goqu.L() calls in aggregate API 0.3%