[ Vendor · 2 CVEs ]

smartloli

CVEs affecting smartloli published in the last 30 days, plus any smartloli CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-111681 16 Oct 2026 CVSS 8.8 smartloli EFAKEFAK through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to manage accounts because the…
CVE-2026-111682 16 Oct 2026 CVSS 6.5 smartloli EFAKEFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to read LLM provider API keys…