CVE-2026-26216Suited to automated attack · CISA
Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter
CVSS score
10.0
EPSS probability
%6.0
Risk score
0.6
Published
8 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks Parameter
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2026-53753Code injection in Kidocode Crawl4ai
Patch status unknown Public Exploits:3EPSS %3
9.2
CVE-2026-26217Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling
Patch status unknown Public Exploits:1EPSS %2
7.5
CVE-2026-53755Server-side request forgery in Kidocode Crawl4ai
Patch status unknown Public Exploits:1EPSS %2
10.0
CVE-2026-57572Code injection in Kidocode Crawl4ai
Patch verifiedEPSS %1
9.6
CVE-2026-57571Path traversal in Kidocode Crawl4ai
Patch verified Public Exploits:1EPSS %1
9.1
CVE-2026-56260Path traversal in Kidocode Crawl4ai
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-26216"