Log in Start free

dfpc-coe

Products

ProductCVEsExploitedLatest
CloudTAK2–Sep 30, 2026

Exploited and recent CVEs

  • CVE-2026-55177 High 7.6 CloudTAK: Authenticated full-read SSRF in /api/esri* routes — user-controlled URL fetched with no IP-classification guard 0.4%
  • CVE-2026-54546 Medium 5.0 CloudTAK: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard 0.4%