What’s Vulnerable › Products

Arcadia Technology, LLC Crafty Controller vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your Arcadia Technology, LLC Crafty Controller version is affected

Latest Arcadia Technology, LLC Crafty Controller vulnerabilities

• CVE-2026-90821 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller (CVSS 5.4)
• CVE-2026-18516 — Improper Encoding or Escaping of Output in Crafty Controller (CVSS 9.6)
• CVE-2026-13716 — Path Traversal: '.../...//' in Crafty Controller (CVSS 9.1)
• CVE-2026-5652 — Authorization Bypass Through User-Controlled Key in Crafty Controller (CVSS 9.0)
• CVE-2026-0963 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller (CVSS 8.8)
• CVE-2026-0805 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller (CVSS 8.8)
• CVE-2025-14701 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller (CVSS 7.1)
• CVE-2025-14700 — Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller (CVSS 9.9)
• CVE-2025-5990 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller (CVSS 5.4)
• CVE-2024-1064 — Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4 (CVSS 7.5)