Skip to content
OpenAdvisories

Vendor

CoreWorxLab

1 known vulnerabilities.

Products

CAAL 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-8725

    CoreWorxLab CAAL test-hass Endpoint webhooks.py server-side request forgery

    A weakness has been identified in CoreWorxLab CAAL up to 1.6.0. The affected element is an unknown function of the file src/caal/webhooks.py of the component test-hass Endpoint. This manipulation causes server-side request forgery. Remote exploitation of the …

    CoreWorxLab CAAL