What’s Vulnerable › Products

Cleanuparr vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Cleanuparr version is affected

Latest Cleanuparr vulnerabilities

• CVE-2026-44184 — Cleanuparr: Reflective CORS combined with trusted-network auth allows cross-origin admin API reads (CVSS 8.0)
• CVE-2026-44183 — Cleanuparr: X-Forwarded-For leftmost parsing allows remote unauthenticated admin takeover when reverse-proxy mode is enabled (CVSS 9.8)
• CVE-2026-32702 — Cleanuparr has Username Enumeration via Timing Attack (CVSS 5.3)