TarsCloud TarsWeb

• CVE-2026-80349 Critical 9.8 TarsWeb through 3.0.14 Authentication Bypass via Spoofed X-Forwarded-For and uid Parameter 0.7%
• CVE-2026-80348 High 8.8 TarsWeb through 3.0.16 Missing Authorization on Patch Deploy, Download and Delete Endpoints 0.6%