Advisories · Technology

CTFd.

Every CVE that names CTFd among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-121562 CVE record

CVSS 6.9 Medium

CTFd 3.1.0 before 3.8.7 Information Disclosure via /api/v1/teams Endpoint
- CTFd
- Broken access control
Not analysed yet 3 Nov 2026
CVE-2026-78145 CVE record

CVSS 5.3 Medium

CTFd __init__.py _is_safe_url redirect
- CTFd
- Open redirect
Not analysed yet 23 Aug 2026
CVE-2024-11717 CVE record

CVSS 6.3 Medium

Weak credentials in CTFd
- CTFd
- Hard-coded credentials
- CWE-837
Not analysed yet 2 Jan 2025
CVE-2024-11716 CVE record

CVSS 5.3 Medium

CTFd: While assignment of a user to a team (bracket) in CTFd should be possible only once…
- CTFd
- CWE-837
Not analysed yet 2 Jan 2025