All 3 CVE vulnerabilities found in Distributor, with AI-generated Chinese analysis, references, and POCs.
Vendor: 10up
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-111631 | Distributor before 2.3.2 Missing Authorization in External Connection AJAX Actions CWE-862 | 5.4 | Medium | 2026-10-16 |
| CVE-2026-111628 | 10up Distributor before 2.3.2 PHP Object Injection via set_meta() CWE-502 | 5.0 | Medium | 2026-10-16 |
| CVE-2026-111625 | 10up Distributor before 2.3.2 Missing Authorization via dt_push AJAX Action CWE-862 | 5.0 | Medium | 2026-10-16 |
All 3 known CVE vulnerabilities affecting Distributor with full Chinese analysis, references, and POCs where available.