CVE ID :CVE-2026-112265 Published : 19 października 2026 13:55 | 9 minut ago Description :LangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows unauthenticated attackers to inject forged Lark/Feishu events by skipping signature checks. Attackers knowing...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-112265 - LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification

VERWANDTEARTIKEL

CVE-2026-112266 - SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching

CVE-2026-112264 - BentoML through 1.4.39 Dockerfile Instruction Injection via docker.env Keys

CVE-2026-112263 - Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting

CVE-2026-111915 - Yank Note before 3.93.1 Path Traversal via /api/help Endpoint

Hackers Exploit SiteGuard WAF Vulnerability That Could Give Them Full Control of Servers

CVE-2026-88901 - Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by default