Log in Start free

Tencent

Products

ProductCVEsExploitedLatest
WeKnora15–Oct 28, 2026
AI-Infra-Guard3–Sep 28, 2026
ncnn3–Oct 19, 2026
RapidJSON3–Oct 27, 2026
TFace2–Dec 23, 2025
HunyuanDiT2–Dec 23, 2025
WeChat2–Apr 14, 2021
Mass Service Engine in Cluster (MSEC)1–Sep 15, 2026
MedicalNet1–Dec 23, 2025
MimicMotion1–Dec 23, 2025
NeuralNLP-NeuralClassifier1–Dec 23, 2025
PatrickStar1–Dec 23, 2025
PC Manager1–Jul 13, 2026
aig-skill-scan1–Sep 2, 2026
APIJSON1–Aug 10, 2026
FaceDetection-DSFD1–Dec 23, 2025
BrowserSkill1–Sep 20, 2026
Hunyuan3D-11–Dec 23, 2025
HunyuanVideo1–Dec 23, 2025

Exploited and recent CVEs

  • CVE-2026-118376 Medium 5.3 WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses 0.3%
  • CVE-2026-116620 High 7.3 Tencent RapidJSON Regex stream.h Take out-of-bounds 0.3%
  • CVE-2026-112074 Medium 6.3 Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow 0.2%
  • CVE-2026-112073 Medium 6.3 Tencent ncnn MatMul matmul.cpp matmul_transb out-of-bounds 0.2%
  • CVE-2026-108821 Medium 6.3 Tencent WeKnora SQL Validator inject.go validateSubquery sql injection 0.2%
  • CVE-2026-101080 Medium 4.8 Tencent AI-Infra-Guard File Access dir_actions.py startsWith path traversal 0.1%
  • CVE-2026-94111 Medium 6.6 Tencent BrowserSkill through 0.3.0 Origin Validation Error in Local WebSocket Daemon 0.1%
  • CVE-2026-89040 Critical 9.8 Tencent Mass Service Engine in Cluster (MSEC) path traversal 1.1%
  • CVE-2026-91750 Medium 6.5 WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects 0.4%
  • CVE-2026-84809 Medium 6.5 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode 0.6%
  • CVE-2026-84809 Medium 6.5 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode 0.6%
  • CVE-2026-72565 Critical 9.8 Tencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form Bypass 0.7%
  • CVE-2026-50144 High 7.1 ncnn: Out-of-bounds heap write in ParamDict::load_param via unchecked negative parameter id 0.2%
  • CVE-2026-15515 High 7.0 Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path 0.2%
  • CVE-2026-8786 Medium 6.3 Tencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorization 0.3%
  • CVE-2026-5585 Medium 5.3 Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure 0.7%
  • CVE-2026-30861 Critical 10.0 WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation 2.4%
  • CVE-2026-30860 Critical 10.0 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool 0.7%
  • CVE-2026-30859 Medium 5.3 WeKnora: Broken Access Control - Cross-Tenant Data Exposure 0.2%
  • CVE-2026-30858 Medium 6.5 WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources 0.4%
  • CVE-2026-30857 Medium 5.3 WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning 0.3%
  • CVE-2026-30856 Medium 5.9 WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection 0.3%
  • CVE-2026-30855 High 8.8 WeKnora: Broken Access Control in Tenant Management 0.4%
  • CVE-2026-30247 Medium 5.9 WeKnora: SSRF via Redirection 0.4%
  • CVE-2026-22688 Critical 10.0 WeKnora has Command Injection in MCP stdio test 1.9%
  • CVE-2026-22687 Medium 5.6 WeKnora vulnerable to SQL Injection 0.4%
  • CVE-2025-13715 High 7.8 Tencent FaceDetection-DSFD resnet Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.4%
  • CVE-2025-13709 High 7.8 Tencent TFace restore_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.5%
  • CVE-2025-13711 High 7.8 Tencent TFace eval Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.5%
  • CVE-2025-13706 High 7.8 Tencent PatrickStar merge_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.5%