CyberSecBulletin

Continuwuity vulnerabilities

We track 2 vulnerabilities in Continuwuity products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 2, 2026.

2vulnerabilities
2critical
0high
0exploited
9.6average CVSS score

Latest Continuwuity vulnerabilities

  • 9.3 Critical severity

    continuwuity: Unintended Proxy or Intermediary

    CVE-2026-24471Continuwuity

    continuwuity is a Matrix homeserver written in Rust. This vulnerability allows an attacker with a malicious remote server to cause the local server to sign an arbitrary event upon user interaction. Upon a user account leaving a room (rejecting an invite), join

  • 9.9 Critical severity

    Conduit is a chat server powered by Matrix.

    CVE-2025-68667Continuwuity

    Conduit is a chat server powered by Matrix. A vulnerability that affects a number of Conduit-derived homeservers allows a remote, unauthenticated attacker to force the target server to cryptographically sign arbitrary membership events. Affected products inclu