All 7 CVE vulnerabilities found in ail-framework, with AI-generated Chinese analysis, references, and POCs.
Vendor: ail-project
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-76164 | Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources CWE-918 | 7.1 | High | 2026-08-19 |
| CVE-2026-71447 | Stored Cross-Site Scripting in Chat and Forum Translation Controls in ail-framework CWE-79 | 6.9 | Medium | 2026-08-06 |
| CVE-2026-71446 | Stored Cross-Site Scripting in AIL Framework Domain Screenshot View CWE-79 | 6.9 | Medium | 2026-08-06 |
| CVE-2026-71445 | Authenticated Reflected Cross-Site Scripting in Tag Error Responses in ail-framework CWE-79 | 8.2 | High | 2026-08-06 |
| CVE-2026-59510 | Authenticated Path Traversal in AIL Framework PDF Object Handling Enables Potential Arbitrary File Read CWE-22 | - | - | 2026-07-05 |
| CVE-2026-56138 | Authenticated Path Traversal in AIL framework /objects/item/diff Allows Reading Gzip-Compressed Files CWE-22 | - | - | 2026-06-19 |
| CVE-2026-39416 | Stored XSS in modal item preview for long item content in AIL Framework CWE-79 | 5.4AI | Medium AI | 2026-04-08 |
All 7 known CVE vulnerabilities affecting ail-framework with full Chinese analysis, references, and POCs where available.