Tencent WeKnora

• CVE-2026-118376 Medium 5.3 WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses 0.3%
• CVE-2026-108821 Medium 6.3 Tencent WeKnora SQL Validator inject.go validateSubquery sql injection 0.2%
• CVE-2026-91750 Medium 6.5 WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects 0.4%
• CVE-2026-8786 Medium 6.3 Tencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorization 0.3%
• CVE-2026-30861 Critical 10.0 WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation 2.4%
• CVE-2026-30860 Critical 10.0 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool 0.7%
• CVE-2026-30859 Medium 5.3 WeKnora: Broken Access Control - Cross-Tenant Data Exposure 0.2%
• CVE-2026-30858 Medium 6.5 WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources 0.4%
• CVE-2026-30857 Medium 5.3 WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning 0.3%
• CVE-2026-30856 Medium 5.9 WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection 0.3%
• CVE-2026-30855 High 8.8 WeKnora: Broken Access Control in Tenant Management 0.4%
• CVE-2026-30247 Medium 5.9 WeKnora: SSRF via Redirection 0.4%
• CVE-2026-22688 Critical 10.0 WeKnora has Command Injection in MCP stdio test 1.9%
• CVE-2026-22687 Medium 5.6 WeKnora vulnerable to SQL Injection 0.4%
• CVE-2025-11046 High 7.3 Tencent WeKnora test testEmbeddingModel server-side request forgery 0.5%