Arcadia Technology, LLC CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Arcadia Technology, LLC CVE published 2026-10-16

CVE-2026-18516

A critical vulnerability in the Audit Logs component of Crafty Controller allows remote, unauthenticated attackers to perform stored cross-site scripting via HTTP header injection. This vulnerability has a CVSS score of 9.6 and is considered critical. Defenders responsible for deploying and managing Crafty Controller instances should assess exposure and prioritize verification and remediation efforts. The [truncated]