What’s Vulnerable › Products

contribsys faktory vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your contribsys faktory version is affected

Latest contribsys faktory vulnerabilities

• CVE-2026-63404 — Faktory: Insecure predictable /tmp/redis.conf enables local Redis config hijack (network exposure / root RCE primitive) (CVSS 7.3)
• CVE-2026-63403 — Faktory: Unrecovered panic in command handlers allows full-server denial of service (CVSS 8.7)
• CVE-2023-37279 — Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input (CVSS 7.5)