Threats tagged 'ghsa-h8j8-r6g6-37hc'

1 threat

Threats tagged 'ghsa-h8j8-r6g6-37hc'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.2	EPSS 0.5%	CVE-2026-108549cc-connect · Missing Authentication for Critical Function Critical9.2EPSS 0.5%2026-10-10CVE Database V5CVE-2026-108549 CVE-2026-108549 is a critical vulnerability in chenhg5 cc-connect up to version 1.5.0. It involves missing authentication in the MAX platform adapter webhook mode, allowing unauthenticated remote attackers to send forged updates to the webhook listener on port 8080. This can enable attackers to execute privileged commands such as /shell on the host system. EPSS 0.5%Vulnerability chenhg5 #ghsa-h8j8-r6g6-37hc	CVE Database V5	2026-10-10

Showing 1–1 of 1 result