What’s Vulnerable › Products

MODSetter SurfSense vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your MODSetter SurfSense version is affected

Latest MODSetter SurfSense vulnerabilities

• CVE-2026-102245 — MODSetter SurfSense circleback Endpoint circleback_webhook_route.py missing authentication (CVSS 7.3)
• CVE-2026-102244 — MODSetter SurfSense Document Export Feature editor_routes.py server-side request forgery (CVSS 4.3)
• CVE-2026-102243 — MODSetter SurfSense MCP Connector Integration test command injection (CVSS 7.4)