Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970,...
CVE-2026-101065
Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart
#advisory
共收录 23312 条相关情报。
← 返回所有主题Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server...
CVE-2026-101064
Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows p
A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to...
CVE-2026-100877
A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be
A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to...
CVE-2026-100876
A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Aff
A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects...
CVE-2026-100880
A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the fi
A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is...
CVE-2026-100878
A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.is
A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the...
CVE-2026-100879
A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed o
Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1...
CVE-2026-101063
Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/* when registry authen
A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to...
CVE-2026-100875
A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be
A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to...
CVE-2026-100873
A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be.
A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to...
CVE-2026-100874
A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This af
Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri
CVE-2026-101090
Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboard
Nezha before 2.2.7 Information Disclosure via /api/v1/profile
CVE-2026-101089
Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the
Nezha before 2.3.1 Denial of Service via Concurrent Server Delete
CVE-2026-101088
Nezha is a server and website monitoring tool. In versions >= 2.2.11 and < 2.3.1, the service sentinel worker (service/s
Nezha 2.0.10 through 2.3.2 SSRF Denylist Bypass IPv6
CVE-2026-101087
Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable notification and DDNS web
Nezha Dashboard before 2.3.5 Task Type Validation Bypass
CVE-2026-101086
Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing aut
Nezha before 2.3.8 Denial of Service via Alert Rule
CVE-2026-101085
Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users
obot before v0.21.1 Authorization Bypass via /mcp-connect
CVE-2026-101084
obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticat
Obot before v0.23.0 Server-Side Request Forgery via MCP
CVE-2026-101064
Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows p
Obot before v0.23.0 Authentication Bypass via Registry API
CVE-2026-101063
Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/* when registry authen