All 6 CVE vulnerabilities found in TheHive, with AI-generated Chinese analysis, references, and POCs.
Vendor: StrangeBee
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-63099 | TheHive 4.1.24 Broken Object Level Authorization via Attachment Download Endpoints CWE-639 | 6.5 | Medium | 2026-07-17 |
| CVE-2026-63098 | TheHive 4.1.24 Unauthenticated Information Disclosure via /api/status Endpoint CWE-306 | 5.3 | Medium | 2026-07-17 |
| CVE-2025-48741 | StrangeBee TheHive 安全漏洞 CWE-266 | 6.5AI | Medium AI | 2025-05-23 |
| CVE-2025-48740 | StrangeBee TheHive 跨站请求伪造漏洞 CWE-352 | 8.8AI | High AI | 2025-05-23 |
| CVE-2025-48738 | StrangeBee TheHive 安全漏洞 CWE-770 | 8.2AI | High AI | 2025-05-23 |
| CVE-2025-48739 | StrangeBee TheHive 代码问题漏洞 CWE-918 | 5.5AI | Medium AI | 2025-05-23 |
All 6 known CVE vulnerabilities affecting TheHive with full Chinese analysis, references, and POCs where available.