ChewKeanHo

Products

ProductCVEsExploitedLatest
Actualizer1–May 13, 2025
AutomataCI1–Sep 22, 2023
software-actualizer1–Sep 4, 2026

Exploited and recent CVEs

  • CVE-2026-85649 High 7.9 (Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh. The i 0.2%
  • CVE-2025-47276 High 7.5 Actualizer Uses OpenSSL's "-passwd" Function Which Uses SHA512 Under The Hood Instead of Proper Password Hasher like Yescript/Argon2i 0.3%
  • CVE-2023-42798 High 8.2 AutomataCI Release Job Can Revert Repo to First Commit 0.4%