Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This vulnerability is fixed in 0.55.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-13 | 2 | Disclosure2 |
| 2026-02-14 | 1 | Disclosure1 |
CVE-2026-24853 Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed t… https://www.cve.org/CVERecord?id=CVE-2026-24853
Post summary
The CVE highlights a configuration limitation in Caido that blocks non-whitelisted domains on port 8080, but no PoC, exploitation, patch, or debunking claim is provided.
CVE-2026-24853 Host Header Injection Bypass in Caido Web Security Toolki... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24853 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
CVE-2026-24853 is a host header injection bypass vulnerability in Caido Web Security Toolkit, announced via a short tweet linking to vulnerability details.
🟠 CVE-2026-24853 - High Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all... https://www.thehackerwire.com/vulnerability/CVE-2026-24853/ https://t.co/Wg0vVnVepb
Post summary
CVE-2026-24853 has been disclosed with basic technical details about its impact on Caido's 8080 port handling; no PoC, exploit, or patch information is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | caido | caido | - | - | - |