Creacast

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Creacast records in CISA KEV

No Creacast vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2025-35542 CVE-2025-57439 · GHSA-vhm5-xv2f-rgj2

HIGH 73

Creacast Creabox Manager 4.4.4 contains a critical Remote Code Execution vulnerability accessible via the edit.php endpoint.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00827 Published 2025-09-22 No fix listed CWE-94

TI-2025-35539 CVE-2025-57434 · GHSA-7pp7-w996-v434

HIGH 73

Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00487 Published 2025-09-22 No fix listed CWE-287

TI-2025-35535 CVE-2025-57430 · GHSA-f95q-xgqf-f5p2

HIGH 72

Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00401 Published 2025-09-22 No fix listed CWE-200