CVE-2026-24853: high-severity vulnerability in caido
Caido has an insufficient patch for DNS rebind leading to RCE
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.1epss 0.3%
Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This vulnerability is fixed in 0.55.0.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
caido · caidoRelated CVEs — caido
In the same product, most dangerous first.
CVE-2025-49004HIGHHijacking Caido instance during the initial setup via DNS Rebinding to achieve RCEEPSS 0.6%CVE-2025-53834MEDIUMCaido Toast Vulnerable to Reflected Cross-site ScriptingEPSS 0.3%CVE-2025-23039MEDIUMCross Site Scripting on URL decode Tooltip in CaidoEPSS 0.2%CVE-2025-66025MEDIUMCaido Improperly Handles External Links in MarkdownEPSS 0.2%