Sploitus

35 exploited vulnerabilities in Dify

Vulnerabilities with publicly known exploits

Vendors
Langgenius, Dify, Unknown, Mozilla, Clickhouse, Myscale
With known exploits
35
Affected Dify versions
≤ 1.14.1

Vulnerabilities with exploits

Highest CVSS first — 1 of these already have exploit code on Sploitus

CVE-2025-3466
CVSS 10.0 CRITICAL 2025-03-19FIX AVAILABLE
CVE-2025-56157
CVSS 9.8 CRITICAL 2025-12-18FIX AVAILABLE
CVE-2026-41948 1 exploit
CVSS 9.4 CRITICAL 2026-05-18FIX AVAILABLE
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41947
CVSS 9.3 CRITICAL 2026-05-18FIX AVAILABLE
CVE-2025-63386
CVSS 9.1 CRITICAL 2025-12-18FIX AVAILABLE
CVE-2025-63388
CVSS 9.1 CRITICAL 2025-12-18FIX AVAILABLE
CVE-2025-3467
CVSS 9.0 HIGH 2025-03-31FIX AVAILABLE
CVE-2026-61461
CVSS 8.8 HIGH 2026-07-10FIX AVAILABLE
CVE-2024-10252
CVSS 8.8 HIGH 2025-03-20FIX AVAILABLE
CVE-2025-67732
CVSS 8.4 HIGH 2026-01-05FIX AVAILABLE
CVE-2026-41949
CVSS 8.2 HIGH 2026-05-18FIX AVAILABLE
CVE-2024-12776
CVSS 8.1 HIGH 2025-03-20FIX AVAILABLE
CVE-2024-12039
CVSS 8.1 HIGH 2025-03-20FIX AVAILABLE
CVE-2025-43862
CVSS 7.6 HIGH 2025-04-25FIX AVAILABLE
CVE-2024-11824
CVSS 7.6 HIGH 2025-03-20FIX AVAILABLE
CVE-2025-63387
CVSS 7.5 HIGH 2025-12-18FIX AVAILABLE
CVE-2024-11822
CVSS 7.5 HIGH 2025-03-20
CVE-2026-42138
CVSS 6.9 MEDIUM 2026-05-04FIX AVAILABLE
CVE-2026-28288
CVSS 6.9 MEDIUM 2026-02-27FIX AVAILABLE
CVE-2026-41950
CVSS 6.5 MEDIUM 2026-05-05FIX AVAILABLE
CVE-2026-6618
CVSS 6.5 MEDIUM 2026-04-20FIX AVAILABLE
CVE-2026-6617
CVSS 6.5 MEDIUM 2026-04-20FIX AVAILABLE
CVE-2025-32796
CVSS 6.5 MEDIUM 2025-04-18FIX AVAILABLE
CVE-2025-32795
CVSS 6.5 MEDIUM 2025-04-18FIX AVAILABLE
CVE-2025-32790
CVSS 6.3 MEDIUM 2025-04-18FIX AVAILABLE
CVE-2026-26023
CVSS 6.1 MEDIUM 2026-02-11FIX AVAILABLE
CVE-2025-58747
CVSS 6.1 MEDIUM 2025-10-17FIX AVAILABLE
CVE-2025-49149
CVSS 6.1 MEDIUM 2025-06-17
CVE-2025-43854
CVSS 6.1 MEDIUM 2025-04-28FIX AVAILABLE
CVE-2025-59422
CVSS 6.0 MEDIUM 2025-09-25FIX AVAILABLE
CVE-2026-21866
CVSS 5.4 MEDIUM 2026-03-03FIX AVAILABLE
CVE-2026-34082
CVSS 5.3 MEDIUM 2026-04-20FIX AVAILABLE
CVE-2025-56520
CVSS 5.3 MEDIUM 2025-09-30
CVE-2025-29720
CVSS 4.8 MEDIUM 2025-04-14
CVE-2026-6619
CVSS 4.0 MEDIUM 2026-04-20FIX AVAILABLE