duhow
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| xiaoai-patch | 2 | – | Aug 10, 2026 |
Exploited and recent CVEs
- CVE-2026-72581 duhow xiaoai-patch - Server-Side Request Forgery in /auth Endpoint 0.5%
- CVE-2026-72580 duhow xiaoai-patch - OS Command Injection in /mute and /unmute Endpoints 1.7%