Databufflabs
AI Threat Alert tracks 2 known AI/ML vulnerabilities affecting Databufflabs products — each enriched with CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis. Browse every Databufflabs CVE below, sorted by severity and recency.
| Severity | CVE | Headline | Package | CVSS |
|---|---|---|---|---|
| CRITICAL | CVE-2026-111693 | DataBuff APM: hard-coded admin credentials allow full takeover | 9.8 | |
| CRITICAL | CVE-2026-111692 | DataBuff ai-apm-web: hardcoded JWT secret enables admin bypass | 9.8 |
Frequently asked questions
How many known vulnerabilities affect Databufflabs?
2 AI/ML CVEs affecting Databufflabs products are tracked, sourced from NVD and GitHub Advisory.
What Databufflabs products are affected?
The CVEs below map to the Databufflabs AI/ML packages and tools tracked by AI Threat Alert; open any CVE to see the affected components and versions.
Where does the Databufflabs vulnerability data come from?
Data is sourced from NVD and GitHub Advisory, then enriched with CVSS severity, EPSS exploit probability, and patch status for each CVE.
How can I monitor Databufflabs for new vulnerabilities?
AI Threat Alert tracks Databufflabs continuously; a Pro subscription adds breaking alerts when new CVEs affecting Databufflabs are published.
How do I assess Databufflabs's security exposure?
Each CVE below carries CVSS severity and exploitation signals, so you can review the highest-severity Databufflabs issues first and judge the exposure for your stack.