CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack.

Published Aug 26, 2026 · Updated Aug 31, 2026 · Assigned by mitre