Skip to content
OpenAdvisories

Product · Webreaper

Damselfly

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-111626

    Webreaper Damselfly through 4.5.3 Missing Authentication on REST API Controllers

    Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to access all /api/* routes because controller authorization attributes are commented out. Attackers can send PUT /api/users with Admin rol…

    Webreaper Damselfly