Uunclecode

Products

Exploited and recent CVEs

• CVE-2026-119122 Medium 5.3 Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check 0.4%
• CVE-2026-119121 Medium 4.3 Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for 0.3%
• CVE-2026-119120 High 7.5 Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name 0.4%
• CVE-2026-119119 High 7.5 Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields 0.4%
• CVE-2026-119118 Medium 6.5 Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags 0.2%
• CVE-2026-115508 Medium 6.5 Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields 0.5%
• CVE-2026-112363 Medium 5.3 Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo 0.2%
• CVE-2026-109239 Medium 5.3 Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetch 0.3%
• CVE-2026-109238 High 8.6 Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder 0.3%
• CVE-2026-109237 High 8.1 Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment Variables 0.3%
• CVE-2026-91944 Medium 6.1 crawl4ai before 0.9.3 DOM-based XSS via Playground UI 0.3%
• CVE-2026-91943 High 7.7 Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy 0.4%
• CVE-2026-91942 Medium 5.4 crawl4ai before 0.9.3 Cross-Site Scripting via innerHTML 0.2%
• CVE-2026-91941 High 7.5 Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategy 0.5%
• CVE-2026-91940 High 7.5 crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy 0.5%
• CVE-2026-57572 Critical 10.0 Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args 0.9%
• CVE-2026-57573 High 8.6 Crawl4AI unauthenticated SSRF in Docker streaming crawl endpoint 0.4%
• CVE-2026-57571 Critical 9.6 Crawl4AI arbitrary file write via download filename path traversal 0.8%
• CVE-2026-53753 Critical 9.8 Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API 2.9%
• CVE-2026-53754 High 7.5 Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped) 0.4%
• CVE-2026-53755 High 8.6 Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check 1.6%
• CVE-2026-26217 High 8.6 Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling 2.1%
• CVE-2026-26216 Critical 10.0 Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter 6.4%