Forgekeep

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 7
    Known Exploited: 0
    0
    Critical Level Threats
    2
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-63464

    Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`

    Last Modified: Sep 08, 2026
    Published: Sep 04, 2026

    CVE-2026-61699

    nebula-mesh: Certificate revocation is never enforced at the mesh

    Last Modified: Sep 08, 2026
    Published: Sep 04, 2026

    CVE-2026-55513

    nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens

    Last Modified: Sep 07, 2026
    Published: Sep 04, 2026

    CVE-2026-55512

    nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting

    Last Modified: Sep 09, 2026
    Published: Sep 04, 2026

    CVE-2026-53604

    nebula-mesh: CA private key not zeroized on web mobile-bundle error paths

    Last Modified: Sep 07, 2026
    Published: Sep 04, 2026
    Items Per Page
    Forgekeep Vulnerabilities & Security CVEs | CVE-DB