HK
Vendor
HKUDS
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-90809 | NA nanobot HKUDS | 7.3 | Sep 14 | HKUDS nanobot ExecTool shell.py ExecTool._spawn argument injection |
| CVE-2026-90808 | NA nanobot HKUDS | 6.3 | Sep 14 | HKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklist |
| CVE-2026-19246 | NA nanobot HKUDS | 6.3 | Aug 7 | HKUDS nanobot Provider-returned Image URL image_generation.py _download_image_data_url server-side request forgery |
| CVE-2026-19245 | NA nanobot HKUDS | 3.3 | Aug 7 | HKUDS nanobot Login-shell Environment shell.py ExecTool._prepare_command information disclosure |
| CVE-2026-19244 | NA nanobot HKUDS | 4.7 | Aug 7 | HKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access control |
| CVE-2026-19243 | NA nanobot HKUDS | 6.3 | Aug 7 | HKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injection |
| CVE-2026-35589 | NA Nanobot Nanobot | 9.3 | Apr 14 | nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update) |
| CVE-2026-33654 | NA Nanobot Nanobot | 9.8 | Mar 27 | Zero-Click Indirect Prompt Injection and Authentication Bypass via Email Polling |