Vulnerabilities

TI-2026-65291 CVE-2026-102245 · GHSA-6hf7-jgwh-5jh8

MODSetter SurfSense circleback Endpoint circleback_webhook_route.py missing authentication

HIGH 70

A weakness has been identified in MODSetter SurfSense up to 2.0.3.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00385 Published 2026-09-29 No fix listed CWE-287

TI-2026-65290 CVE-2026-102244 · GHSA-m6qw-8q66-9vp2

MEDIUM 57

A security flaw has been discovered in MODSetter SurfSense up to 0.0.36.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00227 Published 2026-09-29 Fixed in 0.0.36.3 CWE-918

TI-2026-65289 CVE-2026-102243 · GHSA-cm89-cv3h-2jcf

MEDIUM 57

A vulnerability was identified in MODSetter SurfSense up to 2.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01158 Published 2026-09-29 No fix listed CWE-74