Sstoatchat

Products

Exploited and recent CVEs

• CVE-2026-100679 High 8.8 stoatchat before 0.15.5 MFA Bypass via Cross-Account Ticket 0.4%
• CVE-2026-100678 Medium 6.5 stoatchat before 0.15.5 MFA Brute Force via Insufficient Rate Limiting 0.3%
• CVE-2026-100677 Medium 5.3 stoatchat before 0.15.5 Account Enumeration via Error Location 0.3%
• CVE-2026-100676 High 8.2 stoatchat before 0.15.5 Local Filesystem Read via SVG 0.5%
• CVE-2026-100675 Medium 6.5 stoatchat before 0.15.5 Denial of Service via mass mentions 0.4%
• CVE-2026-100674 Medium 4.3 stoatchat before 0.15.5 Username Validation Bypass via Unicode Sanitization 0.2%
• CVE-2026-74869 High 7.7 stoatchat before 0.15.0 Missing Authorization via Subscribe 0.4%
• CVE-2026-73059 Medium 6.5 stoatchat before 0.15.0 Permission Bypass via message_fetch 0.4%
• CVE-2026-73058 Medium 5.8 stoatchat before 0.15.0 SSRF via IPv6 unspecified address bypass 0.4%
• CVE-2026-73057 High 7.5 stoatchat before 0.15.0 Uncapped SVG Rendering Denial of Service 0.3%
• CVE-2026-57848 Medium 5.5 Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation 0.2%
• CVE-2026-63088 High 8.6 stoatchat < 0.14.0 SSRF via DNS-based IP Blocklist Bypass 0.5%
• CVE-2024-58360 Medium 6.5 stoatchat before 0.7.8 Unrestricted Account Creation 0.4%
• CVE-2026-63306 High 8.6 stoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpoints 0.3%
• CVE-2025-71388 High 7.6 stoatchat 20241213-1 Webhook Token Disclosure via Read Permissions 0.5%
• CVE-2025-71377 High 8.7 stoatchat before 20250210-1 Unrestricted Message History Fetch 0.7%