[ Vendor · 11 CVEs ]
iflytek
CVEs affecting iflytek published in the last 30 days, plus any iflytek CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110764 | 14 Oct 2026 | CVSS 5.3 | iflytek astron-rpaAstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-service /file/download endpoint that allows… | |
| CVE-2026-110211 | 13 Oct 2026 | CVSS 8.1 | iflytek skillhubiFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to permanently delete other users'… | |
| CVE-2026-108864 | 11 Oct 2026 | CVSS 4.2 | iflytek astron-agentiFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other… | |
| CVE-2026-108550 | 10 Oct 2026 | CVSS 8.8 | iflytek skillhubSkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authenticated… | |
| CVE-2026-108547 | 10 Oct 2026 | CVSS 6.5 | iflytek astron-rpaAstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared… | |
| CVE-2026-108548 | 10 Oct 2026 | CVSS 7.3 | iflytek astron-rpaAstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua that accepts any Bearer token… | |
| CVE-2026-108263 | 9 Oct 2026 | CVSS 9.9 | iflytek astron-agentAstron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through… | |
| CVE-2026-108159 | 9 Oct 2026 | CVSS 7.5 | iflytek astron-rpaAstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to… | |
| CVE-2026-108160 | 9 Oct 2026 | CVSS 7.5 | iflytek astron-rpaAstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates… | |
| CVE-2026-95929 | 23 Sep 2026 | CVSS 6.3 | iFlytek astron-agentA weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file… | |
| CVE-2026-95930 | 23 Sep 2026 | CVSS 6.3 | iFlytek astron-agentA security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the function UrlCheckTool.checkUrl… |