Surfer

4 CVEs in 1 Surfer product, including Surfer. Newest: CVE-2026-112222 (2026-10-19). Severity, EPSS and public exploits for each.

Surfer products with known CVEs

ProductCVEs
Surfer4
Surfer CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-112222Medium5.42026-10-19Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfe…
CVE-2025-58603Medium5.32025-09-03Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfe…
CVE-2023-35037High7.62024-12-13Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfe…
CVE-2024-49299High7.62024-10-17Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Surfer Surfer surferseo allows SQL Injection.This issue a…