Vulnerabilities

TI-2026-32935 CVE-2026-45088 · GHSA-35wr-x7v6-9fv2

Missing authentication in hahwul dalfox

HIGH 72

Dalfox is a powerful open-source XSS scanner and utility focused on automation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0031 Published 2026-05-27 Fixed in 2.13.0 CWE-306

TI-2026-32934 CVE-2026-45087 · GHSA-v25v-m36w-jp4h

HIGH 82

Dalfox is a powerful open-source XSS scanner and utility focused on automation.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.08731 Published 2026-05-27 Fixed in 2.13.0 CWE-15

TI-2026-32936 CVE-2026-45089 · GHSA-8hf9-3q64-q2qf

HIGH 75

Dalfox is a powerful open-source XSS scanner and utility focused on automation.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00243 Published 2026-05-27 Fixed in 2.13.0 CWE-306

TI-2026-32937 CVE-2026-45090 · GHSA-2g4x-fq3j-cgq4

HIGH 72

Dalfox is a powerful open-source XSS scanner and utility focused on automation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00273 Published 2026-05-27 Fixed in 2.13.0 CWE-362