Product by Arcadia Technology, Llc

Crafty Controller

10 known vulnerabilities in Crafty Controller (Arcadia Technology, Llc), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Crafty Controller (Arcadia Technology, Llc)

Critical	CVE-2025-14700	Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller also in 1 other product	9.9	17.12.2025
Critical	CVE-2026-13716	Path Traversal: '.../...//' in Crafty Controller also in 1 other product	9.1	11.08.2026
Critical	CVE-2026-0963	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller also in 1 other product	9.9	30.01.2026
Critical	CVE-2026-18516	Improper Encoding or Escaping of Output in Crafty Controller	9.6	16.10.2026
High	CVE-2026-0805	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller also in 1 other product	8.2	30.01.2026
Critical	CVE-2026-5652	Authorization Bypass Through User-Controlled Key in Crafty Controller also in 1 other product	9.0	21.04.2026
High	CVE-2024-1064	Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4 also in 1 other product	7.5	03.02.2024
Medium	CVE-2026-90821	Arcadia Technology Crafty Controller: Cross-site Scripting	5.4	16.10.2026
High	CVE-2025-14701	Arcadia Technology Crafty Controller: Cross-site Scripting also in 1 other product	7.1	17.12.2025
High	CVE-2025-5990	Arcadia Technology Crafty Controller: Cross-site Scripting also in 1 other product	7.6	15.06.2025