maziggy

Products

ProductCVEsExploitedLatest
bambuddy2–Sep 15, 2026

Exploited and recent CVEs

  • CVE-2026-53459 Critical 9.3 Bambuddy's authentication fails open on database errors, allowing unauthenticated access to all endpoints 0.8%
  • CVE-2026-25505 Critical 9.8 Bambuddy Uses Hardcoded Secret Key + Many API Endpoints do not Require Authentication 0.8%