Skip to content
Icewhale vulnerabilities
Newest
-
icewhale casaos
CasaOS <= 0.4.15 Unauthenticated File and Debug Data Exposure
CVE-2025-34171
Public exploit
6.9 Medium
-
icewhale casaos-userservice
Username Enumeration in CasaOS via bypass of CVE-2024-24766
CVE-2024-28232
Fix available
6.2 Medium
-
icewhale casaos, icewhaletech casaos-userservice +1 more
CasaOS Improper Restriction of Excessive Authentication Attempts vulnerability
CVE-2024-24767
Fix available
9.1 Critical
-
icewhale casaos-userservice
CasaOS Username Enumeration
CVE-2024-24766
Fix available
6.2 Medium
-
icewhale casaos, icewhaletech casaos-userservice +1 more
CasaOS-UserService allows unauthorized access to any file
CVE-2024-24765
Fix available
7.5 High
-
icewhale casaos, icewhaletech casaos-userservice +1 more
CasaOS Command Injection vulnerability
CVE-2023-37469
Fix available
8.8 High
-
icewhale casaos
Weak json web token (JWT) secrets in CasaOS
CVE-2023-37266
Fix available
9.8 Critical
-
icewhale casaos, casaos-gateway +1 more
Incorrect identification of source IP addresses in CasaOS
CVE-2023-37265
Fix available
9.8 Critical
-
icewhale casaos
Command Injection in CasaOS
CVE-2022-24193
Fix available
9.8 Critical