Login Request a demo
WE
Product
WeKnora
by Tencent · last CVE Oct 28, 2026
15
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 3High 6Medium 6Low 0
Severity
All severities15Critical3High6Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WeKnora to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-30861
8.8
2%
Mar 7
WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation
Affected: >= 0.2.5, < 0.2.10
CVE-2026-30855
8.8
0%
Mar 7
WeKnora: Broken Access Control in Tenant Management
Affected: < 0.3.2
CVE-2026-22688
8.8
2%
Jan 10
WeKnora has Command Injection in MCP stdio test
Affected: < 0.2.5
CVE-2026-30856
7.6
0%
Mar 7
WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection
Affected: < 0.3.0
CVE-2026-30858
7.5
0%
Mar 7
WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources
Affected: < 0.3.0
CVE-2026-30247
7.5
0%
Mar 7
WeKnora: SSRF via Redirection
Affected: < 0.2.12
Showing 6