CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,470 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,470
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product kidocode:crawl4ai. Show all products

17 CVEs, showing 1 to 17
CVESeverityTitlePublished
CVE-2026-26216Critical 10.0Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter
Assigned by VulnCheck
Feb 12, 2026
CVE-2026-26217High 8.6Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling
Assigned by VulnCheck
Feb 12, 2026
CVE-2026-56265Critical 9.8Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server.Jun 21, 2026
CVE-2026-56266High 8.6Crawl4AI before 0.8.7 contains a server-side request forgery vulnerability in the /crawl, /crawl/stream, /md, and /llm endpoints that fetch arbitrary user-supplied URLs without validation.Jun 22, 2026
CVE-2026-56258High 8.1Crawl4AI before 0.8.8 contains an arbitrary file write vulnerability in the screenshot and PDF endpoints that allows unauthenticated attackers to write files outside the intended directory via symlin…Jun 23, 2026
CVE-2026-56263Medium 6.1Crawl4AI before 0.8.7 contains a stored cross-site scripting vulnerability in the monitor dashboard that renders crawl URLs and error messages via innerHTML without escaping.Jun 23, 2026
CVE-2026-53753Critical 10.0Crawl4AI is an open-source LLM friendly web crawler & scraper.Jun 23, 2026
CVE-2026-53754High 7.5Crawl4AI is an open-source LLM friendly web crawler & scraper.Jun 23, 2026
CVE-2026-53755High 7.5Crawl4AI is an open-source LLM friendly web crawler & scraper.Jun 23, 2026
CVE-2026-56262Medium 6.5Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations.Jun 24, 2026
CVE-2026-56264Medium 6.1Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API server's /execute_js endpoint, which accepts and executes arbitrary user-supplied JavaScript in the se…Jun 30, 2026
CVE-2026-57571Critical 9.6Crawl4AI is an open-source LLM-friendly web crawler and scraper.Jul 6, 2026
CVE-2026-57572Critical 10.0Crawl4AI is an open-source LLM-friendly web crawler and scraper.Jul 6, 2026
CVE-2026-57573High 8.6Crawl4AI is an open-source LLM-friendly web crawler and scraper.Jul 6, 2026
CVE-2026-56261High 7.5Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validatio…Jul 10, 2026
CVE-2026-56259High 8.2Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API calls to attacker-controlled endpoints and read arbitrary envi…Jul 12, 2026
CVE-2026-56260Critical 9.1Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints.Jul 12, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.