flagforge records
8 published records for vendor flagforge.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 75%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-862 Missing Authorization2
- CWE-1333 Inefficient Regular Expression Complexity1
- CWE-284 Improper Access Control1
- CWE-359 Exposure of Private Personal Information to an Unauthorized Actor1
- CWE-384 Session Fixation1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2025-59841No exploit | FlagForgeCTF's Improper Session Handling Allows Access After Logoutflagforge · flagforge · CWE-384 | Critical9.8 | — | 0.4% | Sep 25, 2025 |
39Monitor | CVE-2025-59827No exploit | FlagForgeCTF is Missing Authorization in main-v2flagforge · flagforge · CWE-862 | Critical9.8 | — | 0.4% | Sep 24, 2025 |
36Monitor | CVE-2025-61777Proof of concept | FlagForge Allows Unauthenticated Badge Template API Accessflagforge · flagforge · CWE-200 | Critical9.1 | — | 0.5% | Oct 6, 2025 |
32Monitor | CVE-2025-59932No exploit | FlagForgeCTF Unauthenticated Resource Modification/Deletionflagforge · flagforge · CWE-284 | High8.2 | — | 0.4% | Sep 26, 2025 |
30Monitor | CVE-2025-59833No exploit | FlagForgeCTF Hint Exposure via APIflagforge · flagforge · CWE-200 | High7.5 | — | 0.3% | Sep 24, 2025 |
30Monitor | CVE-2026-21868No exploit | Flag Forge has ReDoS Vulnerability in User Profile Lookup APIflagforge · flagforge · CWE-1333 | High7.5 | — | 0.3% | Jan 7, 2026 |
30Monitor | CVE-2025-59826No exploit | FlagForgeCTF Vulnerable to Unauthorized Problem Creationflagforge · flagforge · CWE-862 | High7.6 | — | 0.2% | Sep 23, 2025 |
27Monitor | CVE-2025-59843Proof of concept | FlagForgeCTF Exposes User Emails via Public /api/user/[username] APIflagforge · flagforge · CWE-359 | Medium6.9 | — | 0.4% | Sep 26, 2025 |
- CVE-2025-5984139Monitor
FlagForgeCTF's Improper Session Handling Allows Access After Logout
CriticalCVSS 9.8No exploitEPSS 0%flagforge · flagforgeSep 25, 2025
- CVE-2025-5982739Monitor
FlagForgeCTF is Missing Authorization in main-v2
CriticalCVSS 9.8No exploitEPSS 0%flagforge · flagforgeSep 24, 2025
- CVE-2025-6177736Monitor
FlagForge Allows Unauthenticated Badge Template API Access
CriticalCVSS 9.1Proof of conceptEPSS 0%flagforge · flagforgeOct 6, 2025
- CVE-2025-5993232Monitor
FlagForgeCTF Unauthenticated Resource Modification/Deletion
HighCVSS 8.2No exploitEPSS 0%flagforge · flagforgeSep 26, 2025
- CVE-2025-5983330Monitor
FlagForgeCTF Hint Exposure via API
HighCVSS 7.5No exploitEPSS 0%flagforge · flagforgeSep 24, 2025
- CVE-2026-2186830Monitor
Flag Forge has ReDoS Vulnerability in User Profile Lookup API
HighCVSS 7.5No exploitEPSS 0%flagforge · flagforgeJan 7, 2026
- CVE-2025-5982630Monitor
FlagForgeCTF Vulnerable to Unauthorized Problem Creation
HighCVSS 7.6No exploitEPSS 0%flagforge · flagforgeSep 23, 2025
- CVE-2025-5984327Monitor
FlagForgeCTF Exposes User Emails via Public /api/user/[username] API
MediumCVSS 6.9Proof of conceptEPSS 0%flagforge · flagforgeSep 26, 2025