cbcvebase.

Manomanotech Firefighter-Incident vulnerabilities

1 known vulnerability affecting manomanotech/firefighter-incident.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-42864P2CRITICALCVSS 9.9fixed in 0.0.542026-05-11
CVE-2026-42864 [CRITICAL] CWE-306 CVE-2026-42864: FireFighter is an incident management application. Prior to 0.0.54, the POST /api/v2/firefighter/rai FireFighter is an incident management application. Prior to 0.0.54, the POST /api/v2/firefighter/raid/jira_bot endpoint (CreateJiraBotView) is reachable without authentication (permission_classes = [permissions.AllowAny]). Its attachments payload is fetched server-side via httpx.get() with no URL validation, then uploaded as an attachment on the J
nvd
Manomanotech Firefighter-Incident vulnerabilities | cvebase