All 5 CVE vulnerabilities found in Vector, with AI-generated Chinese analysis, references, and POCs.
Vendor: Wikimedia Foundation
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-77621 | Vector: Arbitrary file write in the file sink via templated path (path traversal). CWE-22 | 9.3 | Critical | 2026-09-22 |
| CVE-2026-77620 | Vector: Unauthenticated denial of service in the `logstash` source via nested compressed frames (stack exhaustion and decompression amplification). CWE-409 | 8.7 | High | 2026-09-22 |
| CVE-2026-77619 | Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation. CWE-130 | 8.7 | High | 2026-09-22 |
| CVE-2025-61657 | Wikimedia Vector 安全漏洞 CWE-79 | 6.1AI | Medium AI | 2026-02-03 |
| CVE-2025-6596 | Vector inserts portlet labels as HTML, allowing for stored XSS through system messages CWE-79 | 6.1AI | Medium AI | 2026-02-02 |
All 5 known CVE vulnerabilities affecting Vector with full Chinese analysis, references, and POCs where available.