What’s Vulnerable › Products

pawelmalak flame vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your pawelmalak flame version is affected

Latest pawelmalak flame vulnerabilities

• CVE-2026-100502 — Flame through 2.4.0 Admin Token Insufficient Session Expiration (CVSS 5.0)
• CVE-2026-100501 — Flame through 2.4.0 Brute-Force Attack via Login Endpoint (CVSS 6.5)
• CVE-2026-100418 — Flame through 2.4.0 Information Exposure via GET /api/config (CVSS 5.3)