smartloli
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| EFAK | 2 | – | Oct 16, 2026 |
Exploited and recent CVEs
- CVE-2026-111682 EFAK 5.0.0 through 5.1.0 Missing Authorization via /api/model-config Exposes API Keys 0.4%
- CVE-2026-111681 EFAK through 5.1.0 Privilege Escalation via /api/users REST API 0.3%