What’s Vulnerable › Products

hahwul dalfox vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your hahwul dalfox version is affected

Latest hahwul dalfox vulnerabilities

• CVE-2026-45090 — Dalfox: Unauthenticated Remote DoS via Closed-Channel Write in `ParameterAnalysis` (server mode) (CVSS 7.5)
• CVE-2026-45089 — Dalfox: Unauthenticated Arbitrary File Create/Append via `output` Option in Dalfox Server Mode (CVSS 8.2)
• CVE-2026-45088 — Dalfox: Unauthenticated Arbitrary File Read with Out-of-Band Exfiltration via `custom-payload-file` in Dalfox Server Mode (CVSS 7.5)
• CVE-2026-45087 — Dalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode (CVSS 10.0)