Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

dragonflyoss Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-49254`Dragonfly Manager OAuth provider client_secret disclosure via unauthenticated GET /api/v1/oauth	Exploitation statusNot known exploited	FixYes	Affected productdragonfly	Published09/15/2026	SeverityLow
`CVE-2026-54637`Dragonfly scheduler v1 gRPC unauthenticated SSRF via attacker-controlled PeerHost in DownloadTinyFile	Exploitation statusNot confirmed	FixYes	Affected productdragonfly	Published09/15/2026	SeverityMedium
`CVE-2026-24124`Dragonfly Manager Job API Allows Unauthenticated Access	Exploitation statusNot known exploited	FixYes	Affected productdragonfly	Published01/22/2026	SeverityHigh
`CVE-2025-59410`Dragonfly tiny file download uses hard coded HTTP protocol	Exploitation statusNot known exploited	FixYes	Affected productdragonfly	Published09/17/2025	SeverityMedium
`CVE-2025-59354`Dragonfly has weak integrity checks for downloaded files	Exploitation statusNot known exploited	FixYes	Affected productdragonfly	Published09/17/2025	SeverityMedium
`CVE-2025-59353`Manager generates mTLS certificates for arbitrary IP addresses	Exploitation statusNot known exploited	FixYes	Affected productdragonfly	Published09/17/2025	SeverityHigh
`CVE-2025-59352`Dragonfly allows arbitrary file read and write on a peer machine	Exploitation statusNot known exploited	FixYes	Affected productdragonfly	Published09/17/2025	SeverityMedium
`CVE-2025-59351`Dragonfly possibly panics due to nil pointer dereference when using variables created alongside an error	Exploitation statusNot known exploited	FixYes	Affected productdragonfly	Published09/17/2025	SeverityLow
`CVE-2025-59350`Timing attacks against Proxy’s basic authentication are possible	Exploitation statusNot known exploited	FixYes	Affected productdragonfly	Published09/17/2025	SeverityLow
`CVE-2025-59349`Directories created via os.MkdirAll are not checked for permissions	Exploitation statusNot known exploited	FixYes	Affected productdragonfly	Published09/17/2025	SeverityLow
`CVE-2025-59348`Dragonfly incorrectly handles a task structure’s usedTraffic field	Exploitation statusPublic exploit	FixYes	Affected productdragonfly	Published09/17/2025	SeverityMedium
`CVE-2025-59347`Dragonfly Manager makes requests to external endpoints with disabled TLS authentication	Exploitation statusPublic exploit	FixYes	Affected productdragonfly	Published09/17/2025	SeverityLow
`CVE-2025-59346`Dragonfly server-side request forgery vulnerability	Exploitation statusPublic exploit	FixYes	Affected productdragonfly	Published09/17/2025	SeverityMedium
`CVE-2025-59345`Dragonfly did not enable authentication for some Manager’s endpoints	Exploitation statusNot known exploited	FixYes	Affected productdragonfly	Published09/17/2025	SeverityHigh
`CVE-2023-27584`Dragonfly2 vulnerable to hard coded cyptographic key	Exploitation statusPublic exploit	FixNot confirmed	Affected productDragonfly2	Published09/19/2024	SeverityCritical

15 / 15 Results

All vulnerabilities loaded

Security vulnerabilities from dragonflyoss

dragonflyoss

How many security vulnerabilities does dragonflyoss have?

Which dragonflyoss product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular dragonflyoss products

dragonfly

Dragonfly2