Read the docs

Wormhole App

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wormhole App records in CISA KEV

No Wormhole App vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-64593 CVE-2026-100251 · GHSA-7r4f-37cf-v9wq

Wormhole.app SSRF

Priority LOW 36

Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connection…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00258 Published 2026-10-01 Fixed in 2026-08-22 CWE-918
Open these records in search →