Arcadia Technology, LLC
Arcadia Technology, LLC Security Releases - October 2026
arcadia-technology-llc-2026-10 Oct 1, 2026 Source: Vendor
Arcadia Technology, LLC security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-18516
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2 matching , clear filters
CVE-2026-18516
BR2026-0000-034218
Crafty Controller
unclaimed
An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header injection
Credited as Thank you to [0x90](https://0x90.sh/) on GitLab for reporting this issue
CVE-2026-90821
BR2026-0000-034219
Crafty Controller
unclaimed
An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input
Credited as Thank you to [Kacper Leszczyński / szotgan](https://gitlab.com/szotgan) on GitLab for reporting this issue