InfraGuard

Plainpad vulnerabilities (CVE list)

2 CVEs8.3 max CVSS

Affected version lines

Known vulnerabilities

CVE Title Affected versions CVSS Exploited EPSS Published
CVE-2026-73529 Plainpad Missing Rate Limiting via POST /v1/sessions ≤ 1.1.1 6.9 — 2026-08-19
CVE-2026-42562 Plainpad: Privilege Escalation via Writable Admin Field in Profile Update (Access Control) * 8.3 — 2026-05-10

Track these versions on your own servers

InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.

Weekly exploited-vulnerability digest

The KEV additions that matter for self-hosted servers, once a week. No other mail.

Data: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (see EPSS at https://www.first.org/epss), endoflife.date. Software list: awesome-selfhosted (CC BY-SA 3.0).