Skip to content
OpenAdvisories

Vendor

MODSetter

3 known vulnerabilities.

Products

SurfSense 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-102245

    MODSetter SurfSense circleback Endpoint circleback_webhook_route.py missing authentication

    A weakness has been identified in MODSetter SurfSense up to 2.0.3. The affected element is an unknown function of the file surfsense_backend/app/routes/circleback_webhook_route.py of the component circleback Endpoint. Executing a manipulation can lead to miss…

    MODSetter SurfSense
  • High 7.4
    CVE-2026-102243

    MODSetter SurfSense MCP Connector Integration test command injection

    A vulnerability was identified in MODSetter SurfSense up to 2.0.3. This issue affects some unknown processing of the file /api/search-source/connectors/mcp/test of the component MCP Connector Integration. Such manipulation leads to command injection. It is po…

    MODSetter SurfSense