Creacast Creabox Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Creacast Creabox Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-57434 — CVSS 8.8 (high): Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation. The system grants…
• CVE-2025-57439 — CVSS 8.8 (high): Creacast Creabox Manager 4.4.4 contains a critical Remote Code Execution vulnerability accessible via the edit.php endpoint. An…
• CVE-2025-57430 — CVSS 7.5 (high): Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get. When accessed, this endpoint…