Host
Tags: Self-signed certificate
As of our latest check on 2026-06-17, 18.25.131.192 (Massachusetts Institute of Technology, AS3, United States) had 2 open ports (80, 443) and 35 known CVEs.
Open ports and CVEs as of our latest check of this host, 2026-06-17.
CVEs by severity: CRITICAL 4 HIGH 18 MEDIUM 10 LOW 3
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 6 only affect a particular platform; this host's is not known (python 3.9.10, werkzeug 2.0.3). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
HTTP/1.1 302 FOUND Date: Wed, 17 Jun 2026 09:23:17 GMT Server: Werkzeug/2.0.3 Python/3.9.10 Content-Type: text/html; charset=utf-8 Content-Length: 236 Location: http://18.25.131.192/login?next=%2F Vary: Cookie Set-Cookie: session=eyJfZmxhc2hlcyI6W3siIHQiOlsibWVzc2FnZSIsIlBsZWFzZSBsb2cgaW4gdG8gYWNjZXNzIHRoaXMgcGFnZS4iXX1dfQ.ajJnhQ.ZHUGWtDdZ0eX1S1l6He7lraSli4; HttpOnly; Path=/
HTTP/1.1 400 Bad Request Date: Wed, 17 Jun 2026 09:23:17 GMT Server: Apache/2.4.18 (Ubuntu) Content-Length: 451 Connection: close Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>400 Bad Request</title> </head><body> <h1>Bad Request</h1> <p>Your browser sent a request that this server could not understand.<br /> Reason: You're speaking plain HTTP to an SSL-enabled server port.<br /> Instead use the HTTPS scheme to access this URL, please.<br /> </p> <hr> <address>Apache/2.4.18 (Ubuntu) Server at sodafridge.xvm.mit.edu Port 443</address> </body></html>
These CVEs only apply when the software runs on a particular platform (for example Windows), and this host's platform is not known. They are not counted.
CVEs by severity: HIGH 3 MEDIUM 3
| CVE | Software |
|---|---|
| CVE-2018-25032 HIGH 7.5 | python 3.9.10 · port 80 |
| CVE-2026-3087 HIGH 7.5 | python 3.9.10 · port 80 |
| CVE-2022-26488 HIGH 7.0 | python 3.9.10 · port 80 |
| CVE-2024-49766 MEDIUM 6.3 | werkzeug 2.0.3 · port 80 |
| CVE-2026-21860 MEDIUM 6.3 | werkzeug 2.0.3 · port 80 |
| CVE-2025-66221 MEDIUM 5.3 | werkzeug 2.0.3 · port 80 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.