Vendor
Ctfer-io
10 known vulnerabilities in products by Ctfer-io, 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-32771 | Monitoring is vulnerable to Archive Slip due to missing checks in sanitization | 9.8 | |
| Critical | CVE-2025-53632 | Chall-Manager's scenario decoding process does not check for zip slips | 9.1 | |
| Critical | CVE-2026-32769 | Fullchain's Invalid NetworkPolicy enables a malicious actor to pivot into another namespace | 9.8 | |
| Critical | CVE-2025-53633 | Chall-Manager's scenario decoding process does not check for zip bombs | 9.8 | |
| Critical | CVE-2026-32737 | Romeo's invalid NetworkPolicy enables a malicious actor to pivot into another namespace | 10.0 | |
| High | CVE-2026-116683 | Ctfer-io Terraform-provider-ctfd: Insufficiently Protected Credentials | — | |
| High | CVE-2026-32805 | Romeo is vulnerable to Archive Slip due to missing checks in sanitization | 7.5 | |
| Critical | CVE-2026-32768 | Chall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespace | 9.9 | |
| High | CVE-2025-53634 | Chall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks | 7.5 | |
| High | CVE-2026-32720 | Improper Access Control in github.com/ctfer-io/monitoring | — |
Products
| Chall-manager | 4 | 0 |