iot-ecology has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.7 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.7
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
1
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-82452Critical· 9.8rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures54CVE-2026-82453High· 7.5rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model41
iot-ecology vulnerabilities
CVEs affecting iot-ecology, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-82453High· 7.5rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model
rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can read API responses from user retrieval and listing routes to obtain plaintext credentials for all accounts.
▾ Twilightiot-ecology · rust-iot-platformEPSS 0.47%via NVD
CVE-2026-82452Critical· 9.8rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures
rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures. Unauthenticated attackers can create, update, list, retrieve, an…
▾ Midnightiot-ecology · rust-iot-platformEPSS 0.83%via NVD