Vulnerability-Lookup — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Vulnerability-Lookup, with AI-generated Chinese analysis, references, and POCs.

Vendor: CIRCL

CVE ID	Title	CVSS	Severity	Published
CVE-2026-73432	Stored Server-Side Request Forgery in Remote-Instance Synchronization Allows Access to Internal Services in vulnerability-lookup CWE-918	5.1	Medium	2026-08-12
CVE-2026-73431	Reusable Account Activation and Recovery Tokens Allow Repeated Account Takeover in vulnerability-lookup CWE-294	8.8	High	2026-08-12
CVE-2026-73405	Authorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookup CWE-862	5.3	Medium	2026-08-12
CVE-2026-73374	Stored Cross-Site Scripting (XSS) via Unescaped CNA Reference Tags in vulnerability-lookup CWE-79	6.1	Medium	2026-08-12
CVE-2026-72761	Webhook SSRF guard bypassed by IPv6 transition addresses (NAT64/6to4/Teredo pass is_global check) in vulnerability-lookup CWE-918	6.9	Medium	2026-08-10
CVE-2025-42620	CSRF vulnerability in CIRCL Vulnerability-Lookup CWE-79	5.4^AI	Medium ^AI	2025-12-08
CVE-2025-42616	CSRF vulnerability in CIRCL Vulnerability-Lookup CWE-352	8.1^AI	High ^AI	2025-12-08
CVE-2025-42615	Improper Restriction of Excessive Authentication Attempts vulnerability in CIRCL Vulnerability-Lookup CWE-307	8.1^AI	High ^AI	2025-12-08
CVE-2025-60249	Vulnerability-Lookup 跨站脚本漏洞 CWE-79	6.4	Medium	2025-09-25
CVE-2025-32413	Vulnerability-Lookup 跨站脚本漏洞 CWE-79	6.4	Medium	2025-04-08

All 10 known CVE vulnerabilities affecting Vulnerability-Lookup with full Chinese analysis, references, and POCs where available.