flightbycanto

Products

ProductCVEsExploitedLatest
Canto4–Apr 17, 2026

Exploited and recent CVEs

  • CVE-2026-6441 Medium 4.3 Canto <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Setting Modification 0.3%
  • CVE-2026-3335 Medium 5.3 Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Upload 1.1%
  • CVE-2024-4936 Critical 9.8 Canto <= 3.0.8 - Unauthenticated Remote File Inclusion 1.0%
  • CVE-2023-3452 Critical 9.8 Canto <= 3.0.4 - Unauthenticated Remote File Inclusion 7.0%