qhkm

Products

ProductCVEsExploitedLatest
zeptoclaw2–Mar 12, 2026

Exploited and recent CVEs

  • CVE-2026-32232 High 8.8 ZeptoClaw: Path boundary checks bypass via symlink, TOCTOU, and hardlink 0.6%
  • CVE-2026-32231 High 8.2 ZeptoClaw: Generic webhook channel trusts caller-supplied identity fields; allowlist is checked against untrusted payload data 0.2%