All 5 CVE vulnerabilities found in Brave, with AI-generated Chinese analysis, references, and POCs.
Vendor: Brave
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-81571 | Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM Parameter | 4.8 | Medium | 2026-09-02 |
| CVE-2026-77115 | Brave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters | - | - | 2026-08-23 |
| CVE-2026-77116 | Brave Popup Builder < 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview | - | - | 2026-08-23 |
| CVE-2025-68508 | WordPress Brave plugin <= 0.8.3 - Broken Access Control vulnerability CWE-862 | 5.3 | Medium | 2025-12-24 |
| CVE-2024-35655 | WordPress Brave – Interactive Content plugin <= 0.6.9 - Cross Site Scripting (XSS) vulnerability CWE-79 | 5.9 | Medium | 2024-06-04 |
All 5 known CVE vulnerabilities affecting Brave with full Chinese analysis, references, and POCs where available.