What’s Vulnerable › Products

ctfer-io chall-manager vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your ctfer-io chall-manager version is affected

Latest ctfer-io chall-manager vulnerabilities

• CVE-2026-32768 — Chall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespace (CVSS 9.9)
• CVE-2025-53634 — Chall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks (CVSS 7.5)
• CVE-2025-53633 — Chall-Manager's scenario decoding process does not check for zip bombs (CVSS 9.8)
• CVE-2025-53632 — Chall-Manager's scenario decoding process does not check for zip slips (CVSS 9.1)