CyberSecBulletin

Keploy vulnerabilities

We track 1 vulnerability in Keploy products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 30, 2026.

1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score

Latest Keploy vulnerabilities

  • 8.6 High severity

    Keploy: Missing Authentication for Critical Functionality

    CVE-2026-82641Keploy

    Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to