Product by Arcadia Technology
Arcadia Technology Crafty Controller
8 known vulnerabilities in Arcadia Technology Crafty Controller (Arcadia Technology), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-14700 | Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller | 9.9 | |
| Critical | CVE-2026-13716 | Path Traversal: '.../...//' in Crafty Controller | 9.1 | |
| Critical | CVE-2026-0963 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller | 9.9 | |
| High | CVE-2026-0805 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller | 8.2 | |
| Critical | CVE-2026-5652 | Authorization Bypass Through User-Controlled Key in Crafty Controller | 9.0 | |
| High | CVE-2024-1064 | Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4 | 7.5 | |
| High | CVE-2025-14701 | Arcadia Technology Crafty Controller: Cross-site Scripting | 7.1 | |
| High | CVE-2025-5990 | Arcadia Technology Crafty Controller: Cross-site Scripting | 7.6 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32sans-atrisk-mail,