CVE-2026-78154
Quick assessment
Affected
CVE-2026-78154
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 the-momentum open-wearables（截至版本 0.6.2）中发现了一个漏洞。该漏洞影响组件“公共邀请码兑换端点”（Public Invitation-Code Redemption Endpoint）中文件 backend/app/api/routes/v1/user_invitation_code.py 的 redeem_invitation_code 函数。通过对参数 code 的操纵，可导致身份验证缺失。远程攻击者可利用此漏洞进行攻击。项目方已通过问题报告提前获知该问题，但至今尚未作出
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationI. Basic Information for CVE-2026-78154
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
N/A
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5