Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.8%	CVE-2026-13716Arcadia Technology Crafty Controller · Path Traversal: '.../...// Critical9.1EPSS 0.8%2026-08-11CVE Database V5CVE-2026-13716 Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution. EPSS 0.8%Vulnerability CWE-35	CVE Database V5	2026-08-11
High	7.1	EPSS 0.3%	CVE-2025-14701Arcadia Technology Crafty Controller · Cross-site Scripting High7.1EPSS 0.3%2025-12-17CVE Database V5CVE-2025-14701 An input neutralization vulnerability in the Server MOTD component of Crafty Controller allows a remote, unauthenticated attacker to perform stored XSS via server MOTD modification. EPSS 0.3%Vulnerability CWE-79	CVE Database V5	2025-12-17

Page 1 of 1