coollabs coolify

Name: coollabs coolify
Brand: coollabs

productUS

cpe:2.3:a:coollabs:coolify:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical18high4medium0low

updated 2026-10-28

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-66209US	high8.8	3.88% (90th)	Exploit	4.0.0	2025-12-23	2 versions
CVE-2025-34161US	high8.8	2.96% (87th)	Exploit	4.0.0	2025-08-27	2 versions
CVE-2025-64424US	high8.8	2.06% (81st)	Exploit	4.0.0	2026-01-05	2 versions
CVE-2025-34159US	high8.8	0.97% (62nd)	Exploit	4.0.0	2025-08-27	2 versions
CVE-2025-34157US	critical9.0	0.48% (41st)	Exploit	4.0.0	2025-08-27	2 versions
CVE-2025-66213US	high8.8	3.28% (88th)	—	4.0.0	2025-12-23	2 versions
CVE-2025-66212US	high8.8	3.25% (88th)	—	4.0.0	2025-12-23	2 versions
CVE-2025-66211US	high8.8	2.85% (87th)	—	4.0.0	2025-12-23	2 versions
CVE-2025-66210US	high8.8	2.85% (87th)	—	4.0.0	2025-12-23	2 versions
CVE-2025-59157US	high8.8	1.82% (79th)	—	4.0.0	2026-01-05	2 versions
CVE-2025-59156US	high8.8	1.00% (63rd)	—	4.0.0	2026-01-05	2 versions
CVE-2025-22609US	—OT elevated	0.75% (55th)	—	4.0.0	2025-01-24	2 versions
CVE-2025-64419US	high8.8	0.65% (51st)	—	4.0.0	2026-01-05	2 versions
CVE-2025-22612US	—OT elevated	0.62% (50th)	—	4.0.0	2025-01-24	2 versions
CVE-2025-64420US	high8.8	0.53% (44th)	—	4.0.0	2026-01-05	2 versions
CVE-2025-22605US	high7.8	0.52% (44th)	—	no fix	2025-01-24	= 4.0.0
CVE-2025-59158US	high8.0	0.50% (43rd)	—	4.0.0	2026-01-05	2 versions
CVE-2025-22611US	—OT elevated	0.49% (42nd)	—	4.0.0	2025-01-24	2 versions
CVE-2025-64425US	high8.1	0.43% (37th)	—	4.0.0	2026-01-05	2 versions
CVE-2025-22610US	medium6.5OT elevated	0.39% (33rd)	—	4.0.0	2025-01-24	2 versions
CVE-2025-22608US	—OT elevated	0.36% (30th)	—	4.0.0	2025-01-24	2 versions
CVE-2025-64423US	high8.8	0.35% (28th)	—	4.0.0	2026-01-05	2 versions
CVE-2025-64422US	medium4.3	0.31% (23rd)	—	4.0.0	2026-01-05	2 versions
CVE-2025-59955US	medium5.7	0.30% (23rd)	—	no fix	2026-01-05	= 4.0.0
CVE-2025-64421US	high8.0OT elevated	0.30% (23rd)	—	4.0.0	2026-01-05	2 versions
CVE-2025-22606US	high7.8	0.29% (21st)	—	no fix	2025-01-24	= 4.0.0
CVE-2025-24025US	—	0.23% (14th)	—	4.0.0	2025-01-24	2 versions
CVE-2025-22607US	medium5.5OT elevated	0.17% (6th)	—	4.0.0	2025-01-24	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')10 CVEs
CWE-862Missing Authorization6 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-116Improper Encoding or Escaping of Output2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan