Craftycontrol Crafty Controller vulnerabilities

• arcadia technology, llc crafty controller Path Traversal: '.../...//' in Crafty Controller CVE-2026-13716 9.1 CriticalAugust 11, 2026
• arcadia technology, llc crafty controller Authorization Bypass Through User-Controlled Key in Crafty Controller CVE-2026-5652 9.0 CriticalApril 21, 2026
• arcadia technology, llc crafty controller Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller CVE-2026-0805 8.2 HighJanuary 30, 2026
• arcadia technology, llc crafty controller Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller CVE-2026-0963 9.9 CriticalJanuary 30, 2026
• arcadia technology, llc crafty controller Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller CVE-2025-14700 Public exploit 9.9 CriticalDecember 17, 2025
• arcadia technology, llc crafty controller Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller CVE-2025-14701 7.1 HighDecember 17, 2025
• arcadia technology, llc crafty controller Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller CVE-2025-5990 7.6 HighJune 15, 2025
• arcadia technology, llc crafty controller Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4 CVE-2024-1064 7.5 HighFebruary 3, 2024