caido

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

caido records in CISA KEV

No caido vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Caido 1 record MEDIUM

Records

5 records

TI-2026-20052 CVE-2026-24853

Caido has an insufficient patch for DNS rebind leading to RCE

MEDIUM 43

Caido is a web security auditing toolkit.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00316 Published 2026-02-13 Fixed in 0.55.0 CWE-290

TI-2025-31132 CVE-2025-49004

Hijacking Caido instance during the initial setup via DNS Rebinding to achieve RCE

LOW 36

Caido is a web security auditing toolkit.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00652 Published 2025-06-09 Fixed in 0.48.0 CWE-290

TI-2025-33726 CVE-2025-53834

Caido Toast Vulnerable to Reflected Cross-site Scripting

LOW 28

Caido is a web security auditing toolkit.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00256 Published 2025-07-14 Fixed in 0.49.0 CWE-79

TI-2025-16849 CVE-2025-23039

Cross Site Scripting on URL decode Tooltip in Caido

LOW 23

Caido is a web security auditing toolkit.

CVSS 3.1MEDIUM 5.2 Adjacent network Low privileges User interaction EPSS 0.00238 Published 2025-01-17 No fix listed CWE-79

TI-2025-40551 CVE-2025-66025

Caido Improperly Handles External Links in Markdown

LOW 19

Caido is a web security auditing toolkit.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00228 Published 2025-11-26 Fixed in 0.53.0 CWE-74

Open these records in search →