Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

WeKnora — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in WeKnora, with AI-generated Chinese analysis, references, and POCs.

Vendor: Tencent

CVE IDTitleCVSSSeverityPublished
CVE-2026-30861 WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation CWE-78 10.0 Critical2026-03-07
CVE-2026-30860 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool CWE-89 10.0 Critical2026-03-07
CVE-2026-30859 WeKnora: Broken Access Control - Cross-Tenant Data Exposure CWE-284 5.3 Medium2026-03-07
CVE-2026-30858 WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources CWE-918 6.5 Medium2026-03-07
CVE-2026-30857 WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning CWE-639 5.3 Medium2026-03-07
CVE-2026-30856 WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection CWE-706 5.9 Medium2026-03-07
CVE-2026-30855 WeKnora: Broken Access Control in Tenant Management CWE-284 8.8 High2026-03-07
CVE-2026-30247 WeKnora: SSRF via Redirection CWE-918 5.9 Medium2026-03-07
CVE-2026-22688 WeKnora has Command Injection in MCP stdio test CWE-77 10.0 Critical2026-01-10
CVE-2026-22687 WeKnora vulnerable to SQL Injection CWE-89 5.6 Medium2026-01-10
CVE-2025-11046 Tencent WeKnora test testEmbeddingModel server-side request forgery CWE-918 7.3 High2025-09-26

All 11 known CVE vulnerabilities affecting WeKnora with full Chinese analysis, references, and POCs where available.