VO
Vendor
volcengine
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-22681 | OP OpenViking Volcengine | 8.5 | Aug 21 | OpenViking < 0.3.4 SSRF via /api/v1/resources |
| CVE-2026-75480 | OP OpenViking volcengine | 6.5 | Aug 17 | OpenViking Debug Vector Endpoints Multi-tenant Data Exposure |
| CVE-2026-13507 | OP OpenViking volcengine | 5.0 | Jun 28 | volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity |
| CVE-2026-40525 | OP OpenViking volcengine | 9.1 | Apr 17 | OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPI |
| CVE-2026-22680 | OP OpenViking Volcengine | 5.3 | Apr 7 | OpenViking < 0.3.3 Missing Authorization via Task Polling |
| CVE-2026-34999 | OP OpenViking Volcengine | 5.3 | Apr 1 | OpenViking 0.2.5 < 0.2.14 Bot Proxy Endpoints Allow Unauthenticated Access |
| CVE-2026-28518 | OP OpenViking Volcengine | 7.8 | Mar 3 | OpenViking .ovpack Import ZIP Slip Path Traversal |
| CVE-2026-22207 | OP OpenViking Volcengine | 9.8 | Feb 26 | OpenViking Missing root_api_key Allows Anonymous ROOT Access |