TI-2026-42315 CVE-2026-59148 · GHSA-rqx4-3f6q-3x2v
Mockoon: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft
Priority HIGH 73
Mockoon provides way to design and run mock APIs.
mockoon
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
mockoon records in CISA KEVNo mockoon vulnerabilities are listed in CISA KEV.
Records
3 records
TI-2025-36691 CVE-2025-59049 · GHSA-w7f9-wqc4-3wxr
Mockoon has a Path Traversal and LFI in the static file serving endpoint
Priority HIGH 72
Mockoon provides way to design and run mock APIs.
TI-2026-42316 CVE-2026-59149 · GHSA-8wqc-v2q8-vff2
Mockoon: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)
Priority MEDIUM 62
Mockoon provides way to design and run mock APIs.