xinnan-tech xiaozhi-esp32-server

• CVE-2026-119703 Medium 4.8 xiaozhi-esp32-server through 0.9.8 Authentication Bypass via Spoofed Device-ID Header 0.3%
• CVE-2026-116017 Medium 4.3 Xiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint 0.2%