Read the docs

Crystal Shard

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Crystal Shard records in CISA KEV

No Crystal Shard vulnerabilities are listed in CISA KEV.

Records

1 record

Priority HIGH 72

Crystal Shard http-protection 0.2.0 contains an IP spoofing vulnerability that allows attackers to bypass protection middleware by manipulating request headers.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00596 Published 2026-01-30 No fix listed CWE-290
Open these records in search →