Log in Start free

Wei-Shaw

Products

ProductCVEsExploitedLatest
sub2api2–Aug 11, 2026

Exploited and recent CVEs

  • CVE-2026-73079 High 8.5 Sub2API: Path traversal in the Responses subpath routes lets an authenticated tenant relay requests to arbitrary upstream endpoints using pooled account credentials 0.4%
  • CVE-2026-27812 High 8.0 Sub2API Vulnerable to Password Reset Poisoning via Host Header Trust Issue, Leading to Account Takeover 0.3%