VendorsIceWhalecasaosany version
Vulnerabilities

IceWhale Tech CasaOS any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2023-37265
Incorrect identification of source IP addresses in CasaOS
Published 2023-07-17 · Analyzed
9.8EPSS 0.074
CVE-2023-37266
Weak json web token (JWT) secrets in CasaOS
Published 2023-07-17 · Analyzed
9.8EPSS 0.068
CVE-2022-24193
CasaOS before v0.2.7 was discovered to contain a command injection vulnerability.
Published 2022-03-07 · Modified
9.8EPSS 0.055
CVE-2024-24767
CasaOS Improper Restriction of Excessive Authentication Attempts vulnerability
Published 2024-03-06 · Analyzed
9.8EPSS 0.010
CVE-2024-24765
CasaOS-UserService allows unauthorized access to any file
Published 2024-03-06 · Analyzed
9.8EPSS 0.010
CVE-2023-37469
CasaOS Command Injection vulnerability
Published 2023-08-24 · Modified
8.8EPSS 0.016
CVE-2025-34171
CasaOS <= 0.4.15 Unauthenticated File and Debug Data Exposure
Published 2026-01-03 · Analyzed
6.9EPSS 0.006