All 3 CVE vulnerabilities found in OmniRoute, with AI-generated Chinese analysis, references, and POCs.
Vendor: diegosouzapw
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-118984 | OmniRoute 3.8.0 before 3.8.52 Unverified Password Change via /api/settings/require-login CWE-620 | 5.5 | Medium | 2026-10-29 |
| CVE-2026-116634 | OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens CWE-306 | 5.9 | Medium | 2026-10-26 |
| CVE-2026-88062 | OmniRoute ACP Custom-Agent Remote Code Execution (RCE) CWE-94 | 9.5 | Critical | 2026-09-10 |
All 3 known CVE vulnerabilities affecting OmniRoute with full Chinese analysis, references, and POCs where available.