[ Vendor · 4 CVEs ]
UnicomAI
CVEs affecting UnicomAI published in the last 30 days, plus any UnicomAI CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108854 | 11 Oct 2026 | CVSS 5.4 | UnicomAI WanwuWanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any authenticated enabled user to delete other users'… | |
| CVE-2026-108855 | 11 Oct 2026 | CVSS 5.4 | UnicomAI WanwuUnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys… | |
| CVE-2026-108856 | 11 Oct 2026 | CVSS 4.2 | UnicomAI WanwuUnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP… | |
| CVE-2026-108853 | 11 Oct 2026 | CVSS 8.1 | UnicomAI WanwuUnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other… |