CVE ID :CVE-2026-121557 Published : Nov. 3, 2026, 4:17 p.m. | 47 minutes ago Description :WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that allows unauthenticated attackers to send WhatsApp messages by calling the Chatwoot webhook route without verifyToken...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-121557 - WPPConnect Server through 2.10.74 Missing Authentication via /api/:session/chatwoot

VERWANDTEARTIKEL

CVE-2026-28336 - SolarWinds Dameware Command Injection Vulnerability

CVE-2026-28335 - SolarWinds Dameware Buffer Overflow Vulnerability

CVE-2026-28327 - SolarWinds Dameware DLL Hijacking Vulnerability

CVE-2026-103916 - Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory

CVE-2026-73328 - Volmarg Personal Management System through 2.1.0 Unrestricted File Upload RCE via /upload/send/

CVE-2026-121559 - GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 Privilege Escalation via User Cloning