VYPR
Vendor

Tidewave AI

Products
2
CVEs
1
Across products
2
Status
Private

Products

2

Recent CVEs

1
  • CVE-2026-109823LowOct 27, 2026
    risk 0.08cvss —epss —

    An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar. Neither response checks the Host header. A web page that rebinds its own domain to the loopback address can therefore read…