rojo-rbx

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

rojo-rbx records in CISA KEV

No rojo-rbx vulnerabilities are listed in CISA KEV.

1 record

TI-2026-64285 CVE-2026-97875

LOW 37

Rojo's "rojo serve" HTTP API (default port 34872) has no Host/Origin header validation, making it vulnerable to DNS rebinding.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.0026 Published 2026-09-25 Fixed in 7.7.0 CWE-350