Karel vulnerabilities
We track 1 vulnerability in Karel products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 20, 2025.
1vulnerabilities
0critical
1high
0exploited
8.5average CVSS score
Latest Karel vulnerabilities
- 8.5 High severity
Karel IP Phone IP1211: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in the Karel IP1211 IP Phone's web management panel. The /cgi-bin/cgiServer.exx endpoint fails to properly sanitize user input to the page parameter, allowing remote authenticated attackers to access arbitrary files on the