Product by Ctfer-io

    Chall-manager

    4 known vulnerabilities in Chall-manager (Ctfer-io), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Chall-manager (Ctfer-io)
    CriticalCVE-2025-53632

    Chall-Manager's scenario decoding process does not check for zip slips

    also in 1 other product

    9.1
    CriticalCVE-2025-53633

    Chall-Manager's scenario decoding process does not check for zip bombs

    also in 1 other product

    9.8
    CriticalCVE-2026-32768

    Chall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespace

    also in 1 other product

    9.9
    HighCVE-2025-53634

    Chall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks

    also in 1 other product

    7.5

    All products by Ctfer-io