bufanyun
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| HotGo | 3 | – | Nov 2, 2026 |
Exploited and recent CVEs
- CVE-2026-120447 HotGo 2.8.4 through 2.15.1 Authentication Bypass via Client-Set SMS Verification Code 0.5%
- CVE-2026-5253 bufanyun HotGo editNotice Endpoint MessageList.vue cross site scripting 0.2%
- CVE-2026-3683 bufanyun HotGo Endpoint upload.go ImageTransferStorage server-side request forgery 0.2%