25 exploited vulnerabilities in Caddy

Vulnerabilities with publicly known exploits

Vendors: Appsmith, Caddy, Alt Linux, Apache, Astra Linux, Haproxy
With known exploits: 25
Affected Appsmith versions: < 2.1
Affected Caddyserver Caddy versions: < 2.11.1, 2.11.2, 2.11.4, 2.11.3, 2.5.1, 2.4.6, 2.5.0, 0.11.0
Affected Puma versions: < 4.3.12, 5.6.4
Affected Goauthentik Authentik versions: < 2025.10.4, 2025.12.4
Affected Haproxy Proxyprotocol versions: < 0.0.2
Affected Authcrunch Caddy-security versions: = 1.1.20
Affected Caddy Project Caddy versions: = 2.1.4, 2.1.5, 2.1.6, 3.0.0, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.12, 6.0.1, 6.0.2, 6.0.9, 6.0.12, 6.0.14, 6.1.0, 6.2.1, 6.3.0, 6.3.1, 6.3.3, 7.0.0, 7.1.0, 7.2.7

CVSS 9.9 CRITICAL 2026-06-24FIX AVAILABLE

CVSS 9.8 CRITICAL 2026-01-01FIX AVAILABLE

CVSS 9.1 CRITICAL 2012-02-17FIX AVAILABLE

CVSS 9.3 CRITICAL 2026-01-01FIX AVAILABLE

CVSS 9.1 CRITICAL 2026-01-01FIX AVAILABLE

CVSS 9.1 CRITICAL 2026-01-01FIX AVAILABLE

CVSS 8.9 HIGH 2026-06-24FIX AVAILABLE

CVSS 8.8 HIGH 2026-03-06FIX AVAILABLE

CVSS 8.6 HIGH 2026-02-12FIX AVAILABLE

CVSS 8.2 HIGH 2026-01-01FIX AVAILABLE

CVSS 8.2 HIGH 2026-01-01FIX AVAILABLE

CVSS 8.1 HIGH 2026-06-16FIX AVAILABLE

CVSS 8.1 HIGH 2026-05-18FIX AVAILABLE

CVSS 7.5 HIGH 2026-06-16FIX AVAILABLE

CVSS 7.5 HIGH 2026-03-06FIX AVAILABLE

CVSS 7.5 HIGH 2022-07-22

CVSS 7.5 HIGH 2019-07-23FIX AVAILABLE

CVSS 7.1 HIGH 2026-04-08FIX AVAILABLE

CVSS 6.1 MEDIUM 2024-02-12

CVSS 6.1 MEDIUM 2022-05-12

CVSS 6.1 MEDIUM 2022-05-12FIX AVAILABLE

CVSS 6.1 MEDIUM 2017-02-12FIX AVAILABLE

CVSS 5.4 MEDIUM 2026-05-19FIX AVAILABLE

CVSS 4.3 MEDIUM 2018-11-10FIX AVAILABLE

CVSS 4.2 MEDIUM 2026-06-16FIX AVAILABLE