Ctfer-Io

9 CVEs across 4 Ctfer-Io products. Browse Ctfer-Io vulnerabilities, severities, and proof-of-concept exploits.

Ctfer-Io products with known CVEs

ProductCVEs
Chall-Manager4
Monitoring2
Romeo2
Fullchain1
Ctfer-Io CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-32768Critical9.92026-03-20Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. In versions prior to 0.6.5, due to a miswritten NetworkPolicy, a ma…
CVE-2026-32771Critical9.82026-03-20The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals (i.e. logs, metrics and distributed traces). In versio…
CVE-2026-32769Critical9.82026-03-20Fullchain is an umbrella project for deploying a ready-to-use CTF platform. In versions prior to 0.1.1, due to a mis-written NetworkPolicy, a malicious actor…
CVE-2026-32805High7.52026-03-18Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub…
CVE-2026-32737Critical10.02026-03-18Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub…
CVE-2026-327202026-03-16The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals (i.e. logs, metrics and distributed traces). Prior to…
CVE-2025-53634High7.52025-07-10Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. The HTTP Gateway processes headers, but with no timeout set. With a…
CVE-2025-53633Critical9.82025-07-10Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario (i.e. a zip archive), the size of the deco…
CVE-2025-53632Critical9.12025-07-10Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario (i.e. a zip archive), the path of the file…