flagForge

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. FlagForge Allows Unauthenticated Badge Template API AccessCVE-2025-61777FlagForgeCTF · CVSS 9.4 · 0.5% likely

   CWE-200

2. FlagForgeCTF Exposes User Emails via Public /api/user/[username] APICVE-2025-59843FlagForgeCTF · CVSS 6.9 · 0.4% likely

   CWE-359

3. FlagForgeCTF's Improper Session Handling Allows Access After LogoutCVE-2025-59841FlagForgeCTF · CVSS 9.8 · 0.4% likely

   CWE-384

4. FlagForgeCTF is Missing Authorization in main-v2CVE-2025-59827FlagForgeCTF · CVSS 8.2 · 0.4% likely

   CWE-862

5. FlagForgeCTF Unauthenticated Resource Modification/DeletionCVE-2025-59932FlagForgeCTF · CVSS 8.6 · 0.4% likely

   CWE-284

6. FlagForgeCTF Hint Exposure via APICVE-2025-59833FlagForgeCTF · CVSS 7.5 · 0.3% likely

   CWE-200

7. Flag Forge has ReDoS Vulnerability in User Profile Lookup APICVE-2026-21868FlagForgeCTF · CVSS 7.5 · 0.3% likely

   CWE-1333

8. FlagForgeCTF Vulnerable to Unauthorized Problem CreationCVE-2025-59826FlagForgeCTF · CVSS 7.6 · 0.2% likely

   CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.