Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Linuxfoundation
Dragonfly

linuxfoundation dragonfly Vulnerabilities: CVEs, CISA KEV & Security Advisories

linuxfoundation

13 CVEs

linuxfoundation dragonfly Vulnerabilities

CVE security advisories and vulnerability history for dragonfly by linuxfoundation.

13

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

4

Public exploits

With known exploit

5.6

Avg CVSS

2024–2026

Last updated January 22, 2026

Overview

linuxfoundation dragonfly has 13 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 5.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting linuxfoundation dragonfly, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of linuxfoundation dragonfly's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High3

Medium5

Low4

In CISA’s Known Exploited Vulnerabilities catalog

0

None of linuxfoundation dragonfly's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of linuxfoundation dragonfly's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every linuxfoundation dragonfly version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

2.1.010 CVEs
2.0.91 CVE
2.1.101 CVE
2.4.11 CVE

Find a version

13 CVEs

Sort

Dragonfly Manager Job API Allows Unauthenticated Access
CVE-2026-24124
Patch
CWE-306
High · CVSS 8.9
EPSS 0.1% (31th pct)2026-01-22
Dragonfly tiny file download uses hard coded HTTP protocol
CVE-2025-59410
Patch
CWE-311
Medium · CVSS 5.5
EPSS 0.0% (9th pct)2025-09-17
Dragonfly has weak integrity checks for downloaded files
CVE-2025-59354
Patch
CWE-328
Medium · CVSS 5.5
EPSS 0.0% (12th pct)2025-09-17
Manager generates mTLS certificates for arbitrary IP addresses
CVE-2025-59353
Patch
CWE-295
High · CVSS 7.7
EPSS 0.1% (18th pct)2025-09-17
Dragonfly allows arbitrary file read and write on a peer machine
CVE-2025-59352
Patch
CWE-202
Medium · CVSS 6.9
EPSS 1.8% (83th pct)2025-09-17
Dragonfly possibly panics due to nil pointer dereference when using variables created alongside an error
CVE-2025-59351
Patch
CWE-476
Low · CVSS 2.7
EPSS 0.1% (23th pct)2025-09-17
Timing attacks against Proxy’s basic authentication are possible
CVE-2025-59350
Patch
CWE-208
Low · CVSS 2.7
EPSS 0.1% (35th pct)2025-09-17
Directories created via os.MkdirAll are not checked for permissions
CVE-2025-59349
Patch
CWE-732
Low · CVSS 2.0
EPSS 0.0% (10th pct)2025-09-17
Dragonfly incorrectly handles a task structure’s usedTraffic field
CVE-2025-59348
Public exploit
Patch
CWE-457
Medium · CVSS 5.5
EPSS 0.1% (26th pct)2025-09-17
Dragonfly Manager makes requests to external endpoints with disabled TLS authentication
CVE-2025-59347
Public exploit
Patch
CWE-295
Low · CVSS 2.7
EPSS 0.0% (12th pct)2025-09-17
Dragonfly server-side request forgery vulnerability
CVE-2025-59346
Public exploit
Patch
CWE-918
Medium · CVSS 5.5
EPSS 0.1% (24th pct)2025-09-17
Dragonfly did not enable authentication for some Manager’s endpoints
CVE-2025-59345
Patch
CWE-306
High · CVSS 7.7
EPSS 0.1% (20th pct)2025-09-17
Dragonfly2 vulnerable to hard coded cyptographic key
CVE-2023-27584
Public exploit
Patch
CWE-321
Critical · CVSS 9.8
EPSS 66.2% (99th pct)2024-09-19

Common weakness types

The CWE weakness categories most often found in linuxfoundation dragonfly CVEs. Follow any weakness for its full explanation.

CWE-306Missing Authentication for Critical Function2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-311Missing Encryption of Sensitive Data1 CVE
CWE-321Use of Hard-coded Cryptographic Key1 CVE
CWE-328Use of Weak Hash1 CVE
CWE-457Use of Uninitialized Variable1 CVE
CWE-476NULL Pointer Dereference1 CVE
CWE-732Incorrect Permission Assignment for Critical Resource1 CVE

Disclosure activity by year

How many linuxfoundation dragonfly CVEs were published each year.

2024

1

2025

11

2026

1

Other linuxfoundation products

Browse vulnerabilities for other products by linuxfoundation.

yocto115 CVEs pytorch31 CVEs everest29 CVEs nats-server24 CVEs harbor23 CVEs magma22 CVEs containerd16 CVEs runc16 CVEs

All linuxfoundation vulnerabilities

Frequently asked questions

Common questions about linuxfoundation dragonfly vulnerabilities.

How many CVEs does linuxfoundation dragonfly have?

linuxfoundation dragonfly has 13 published CVE records since 2024.

How many linuxfoundation dragonfly CVEs are in CISA KEV?

None of linuxfoundation dragonfly's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for linuxfoundation dragonfly vulnerabilities?

Yes — 4 of linuxfoundation dragonfly's CVEs have a known public exploit.

Which versions of linuxfoundation dragonfly are affected?

4 distinct linuxfoundation dragonfly versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in linuxfoundation dragonfly CVEs?

linuxfoundation dragonfly's CVEs most often map to these CWE weakness types: CWE-306 (Missing Authentication for Critical Function), CWE-295 (Improper Certificate Validation), CWE-311 (Missing Encryption of Sensitive Data), CWE-321 (Use of Hard-coded Cryptographic Key).

How many critical linuxfoundation dragonfly vulnerabilities are there?

linuxfoundation dragonfly has 1 critical and 3 high-severity CVEs.

What is the average severity of linuxfoundation dragonfly CVEs?

The average CVSS base score across linuxfoundation dragonfly's scored CVEs is 5.6.

References

All linuxfoundation vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track linuxfoundation dragonfly vulnerabilities

Monitor new linuxfoundation dragonfly vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References