Vulnerabilidades en Sipeed
14 resultadosAnálisis Vexday
A Sipeed apresenta um panorama de risco concentrado em vulnerabilidades recentes, com 13 das 14 CVEs publicadas nos últimos 90 dias, indicando descobertas ativas e contínuas. Nenhuma vulnerabilidade crítica foi registrada e nenhuma está sob exploração ativa, reduzindo a severidade imediata. A fraqueza dominante (CWE-863 - Incorrect Authorization) sugere problemas estruturais de controle de acesso que merecem atenção, embora a falta de ataques em campo indique baixa prioridade operacional no momento.
CVE-2026-32296HIGHSipeed NanoKVM unauthenticated Wi-Fi configuration endpointEPSS 0.5%CVE-2026-16083MEDIUMSipeed PicoClaw LINE Webhook line.go webhook.ParseRequest authentication replayEPSS 0.4%CVE-2026-16084MEDIUMSipeed PicoClaw web.go web_fetch server-side request forgeryEPSS 0.4%CVE-2026-16198MEDIUMSipeed PicoClaw First Run Setup access_control.go authentication bypassEPSS 0.4%CVE-2026-15319MEDIUMSipeed PicoClaw Launcher access_control.go IPAllowlist access controlEPSS 0.3%CVE-2026-16196MEDIUMSipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgeryEPSS 0.3%CVE-2026-15317MEDIUMSipeed PicoClaw Guarded Web Fetch Flow web.go WebFetchTool.Execute server-side request forgeryEPSS 0.2%CVE-2026-15320MEDIUMSipeed PicoClaw pico.go rt.ReloadConfig authorizationEPSS 0.2%CVE-2026-15318MEDIUMSipeed PicoClaw MQTT Channel mqtt.go authorizationEPSS 0.2%CVE-2026-16195MEDIUMSipeed PicoClaw Group Message wecom.go dispatchIncoming authorizationEPSS 0.2%CVE-2026-16197MEDIUMSipeed PicoClaw Group Message feishu_64.go handleMessageReceive authorizationEPSS 0.2%CVE-2026-16081MEDIUMSipeed PicoClaw auth.go cross-site request forgeryEPSS 0.2%CVE-2026-16085MEDIUMSipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphereEPSS 0.1%CVE-2026-16082MEDIUMSipeed PicoClaw pipeline_execute.go ExecTool.executeRun toctouEPSS 0.1%