CyberSecBulletin

FRESHFACE vulnerabilities

We track 3 vulnerabilities in FRESHFACE products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 15, 2025.

3vulnerabilities
2critical
1high
0exploited
9.5average CVSS score

Latest FRESHFACE vulnerabilities

  • 8.6 High severity

    Fresh Framework: Missing Authorization

    CVE-2025-26961FRESHFACE

    Missing Authorization vulnerability in FRESHFACE Fresh Framework fresh-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Fresh Framework: from n/a through <= 1.70.0.

  • 10.0 Critical severity

    Fresh Framework: Improper Control of Generation of Code

    CVE-2025-26936FRESHFACE

    Improper Control of Generation of Code ('Code Injection') vulnerability in FRESHFACE Fresh Framework fresh-framework allows Code Injection.This issue affects Fresh Framework: from n/a through <= 1.70.0.

  • 9.8 Critical severity

    Ark Theme Core: Improper Control of Generation of Code

    CVE-2025-26970FRESHFACE

    Improper Control of Generation of Code ('Code Injection') vulnerability in FRESHFACE Ark Theme Core ark-core allows Code Injection.This issue affects Ark Theme Core: from n/a through < 1.71.0.