Maziggy vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Maziggy products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-53459 Critical · 9.3 CWE-636 Sep 15, 2026

Bambuddy's authentication fails open on database errors, allowing unauthenticated access to all endpoints

Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Starting in version 0.1.6 and prior to version 0.2.4.4, a fail-open in the authentication code allows any attacker to bypass authentication by flooding a public endpoint to exhaust resources causing database access to fail, granting unauthenticated access to all protected endpoints. Version 0.2.4.4 patches the issue.

CVE-2026-25505 Critical · 9.8 CWE-306 Feb 4, 2026

Bambuddy: hardcoded JWT signing key and missing authentication

Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Prior to version 0.1.7, a hardcoded secret key used for signing JWTs is checked into source code and ManyAPI routes do not check authentication. This issue has been patched in version 0.1.7.