Log in Start free

Firecrawl

Products

ProductCVEsExploitedLatest
Firecrawl4–Oct 25, 2026
firecrawl-mcp-server1–Sep 4, 2026

Exploited and recent CVEs

  • CVE-2026-116066 Medium 6.8 Firecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright Service 0.3%
  • CVE-2026-85606 High 7.5 firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath 0.9%
  • CVE-2026-72904 Critical 9.3 Firecrawl: Arbitrary file read via JSON Schema $ref expansion 0.5%
  • CVE-2026-32857 High 8.6 Firecrawl Playwright Service SSRF Protection Bypass via Missing Post-Redirect Validation 0.4%
  • CVE-2025-57818 Medium 6.3 Firecrawl SSRF Vulnerability via malicious webhook 0.3%