All 2 CVE vulnerabilities found in Pico, with AI-generated Chinese analysis, references, and POCs.
Vendor: picocms
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-125367 | Pico through 4.1.2 SSRF in Feeds Service via run SSH Command CWE-918 | 5.4 | Medium | 2026-11-09 |
| CVE-2026-72574 | picocms Pico - Host Header Injection Enables Script Source Hijacking CWE-644 | 6.1 | Medium | 2026-08-10 |
All 2 known CVE vulnerabilities affecting Pico with full Chinese analysis, references, and POCs where available.