What’s Vulnerable › Products

cryptpad vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your cryptpad version is affected

Latest cryptpad vulnerabilities

• CVE-2026-26028 — CryptPad: Sanitizer Bypass in Diffmarked.js Allows Arbitrary HTML Injection and Potential XSS (CVSS 6.1)
• CVE-2025-51846 — CryptPad unbounded WebSocket frame flood (CVSS 7.5)
• CVE-2025-49591 — CryptPad 2FA Bypass Vulnerability (CVSS 9.1)
• CVE-2025-49590 — CryptPad Dom-Based Cross-Site Scripting (XSS) Vulnerability (CVSS 6.1)
• CVE-2019-15302 — (CVSS 6.5)
• CVE-2017-1000051 — (CVSS 6.1)