dataelement

Products

ProductCVEsExploitedLatest
bisheng3–Oct 15, 2026

Exploited and recent CVEs

  • CVE-2026-111363 Medium 6.5 BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox 0.3%
  • CVE-2026-82285 High 8.2 BISHENG Unauthenticated Server-Side Request Forgery via Workflow Report Callback 0.5%
  • CVE-2026-82278 High 8.8 BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once 1.0%