https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T14:49:35.226222+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-24853 CVE-2026-24853 — Caido has an insufficient patch for DNS rebind leading to RCE 2026-10-09T14:49:35.227348+00:00

Affected: caido

Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This vulnerability is fixed in 0.55.0.