All 2 CVE vulnerabilities found in EFAK, with AI-generated Chinese analysis, references, and POCs.
Vendor: smartloli
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-111682 | EFAK 5.0.0 through 5.1.0 Missing Authorization via /api/model-config Exposes API Keys CWE-862 | 6.5 | Medium | 2026-10-16 |
| CVE-2026-111681 | EFAK through 5.1.0 Privilege Escalation via /api/users REST API CWE-862 | 8.8 | High | 2026-10-16 |
All 2 known CVE vulnerabilities affecting EFAK with full Chinese analysis, references, and POCs where available.