[ Vendor · 2 CVEs ]
rachelos
CVEs affecting rachelos published in the last 30 days, plus any rachelos CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111687 | 16 Oct 2026 | CVSS 9.8 | rachelos we-mp-rssWeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template… | |
| CVE-2026-110617 | 14 Oct 2026 | CVSS 4.8 | rachelos we-mp-rsswe-mp-rss through 1.5.3 contains a missing authorization vulnerability in the /api/v1/wx/tools/export/download endpoint that allows unauthenticated… |