WE
Vendor
Wei-Shaw
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-73079 | SU sub2api Wei-Shaw | 8.5 | Aug 11 | Sub2API: Path traversal in the Responses subpath routes lets an authenticated tenant relay requests to arbitrary upstream endpoints using pooled account credentials |
| CVE-2026-27812 | SU sub2api Wei-Shaw | 9.1 | Feb 26 | Sub2API Vulnerable to Password Reset Poisoning via Host Header Trust Issue, Leading to Account Takeover |