Llin-snow

Products

Exploited and recent CVEs

• CVE-2026-79673 Medium 6.5 Ech0 before 4.4.3 Scope Bypass via profile:read Token 0.4%
• CVE-2026-79672 Medium 5.5 Ech0 before 4.4.3 Authentication Bypass via Comment Panel 0.3%
• CVE-2026-79671 Medium 5.5 Ech0 before 4.4.3 SSRF via DNS Resolution Bypass 0.3%
• CVE-2026-79670 Medium 4.8 Ech0 before 4.4.3 Stored XSS via SVG Upload 0.3%
• CVE-2026-79669 Medium 4.3 Ech0 before 4.4.3 Missing Authorization on System Logs 0.3%
• CVE-2026-79668 Medium 5.3 Ech0 before 4.7.3 Unauthenticated Like Endpoint Metric Inflation 0.4%
• CVE-2026-79667 High 7.6 Ech0 before 4.4.3 Authentication Bypass via Scope Enforcement 0.3%
• CVE-2026-79666 Medium 6.5 Ech0 before 4.4.3 Missing Authorization via dashboard log endpoints 0.4%
• CVE-2026-79665 High 8.8 Ech0 before 4.5.1 Authorization Bypass via Session Tokens 0.5%
• CVE-2026-79664 High 7.4 Ech0 before 4.7.3 Access Token Revocation Bypass 0.4%
• CVE-2026-79663 Medium 4.8 Ech0 before 4.7.3 Stored XSS via RSS feed tag names 0.3%
• CVE-2026-79662 High 8.0 Ech0 before 4.7.3 OAuth Redirect URI Validation Bypass 0.3%
• CVE-2026-79661 Medium 6.5 Ech0 before 4.7.3 Unauthenticated fav_count Modification 0.4%
• CVE-2026-79660 Medium 5.3 Ech0 before 4.7.3 Email Disclosure via Public API 0.4%
• CVE-2026-79659 High 7.7 Ech0 before 4.7.3 Server-Side Request Forgery via fetchPeerConnectInfo 0.4%
• CVE-2026-79658 High 7.5 Ech0 before 5.0.1 Denial of Service via Accept-Language 0.5%
• CVE-2026-77151 Low 3.7 lin-snow Ech0 crypto.go MD5Encrypt risky encryption 0.4%
• CVE-2026-35037 High 7.2 Ech0 affected by unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadata 0.6%
• CVE-2026-35036 High 7.5 Ech0 Affected by Unauthenticated Server-Side Request Forgery in Website Preview Feature 0.3%
• CVE-2026-33638 Medium 5.3 Ech0 authenticated user-list exposed data via public `/api/allusers` endpoint 0.5%