Log in Start free

mockoon

Products

ProductCVEsExploitedLatest
mockoon3–Jul 9, 2026

Exploited and recent CVEs

  • CVE-2026-59149 Medium 6.5 Mockoon: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check) 0.5%
  • CVE-2026-59148 High 8.8 Mockoon: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft 0.3%
  • CVE-2025-59049 High 7.5 Mockoon has a Path Traversal and LFI in the static file serving endpoint 1.8%