All 4 CVE vulnerabilities found in CryptPad, with AI-generated Chinese analysis, references, and POCs.
Vendor: cryptpad
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-26028 | CryptPad: Sanitizer Bypass in Diffmarked.js Allows Arbitrary HTML Injection and Potential XSS CWE-116 | 6.1 | Medium | 2026-05-20 |
| CVE-2025-51846 | CryptPad unbounded WebSocket frame flood CWE-770 | 7.5 | High | 2026-04-30 |
| CVE-2025-49591 | CryptPad 2FA Bypass Vulnerability CWE-284 | 9.8AI | CriticalAI | 2025-06-18 |
| CVE-2025-49590 | CryptPad Dom-Based Cross-Site Scripting (XSS) Vulnerability CWE-692 | 6.1AI | MediumAI | 2025-06-18 |
All 4 known CVE vulnerabilities affecting CryptPad with full Chinese analysis, references, and POCs where available.