PunchIn-App

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

PunchIn-App records in CISA KEV

No PunchIn-App vulnerabilities are listed in CISA KEV.

1 record

TI-2026-39476 CVE-2026-54649

LOW 13

punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to a private inbox.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00838 Published 2026-09-17 Fixed in 1.5.0 CWE-200