All 3 CVE vulnerabilities found in grimmory, with AI-generated Chinese analysis, references, and POCs.
Vendor: grimmory-tools
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-93955 | grimmory-tools grimmory Download Endpoint KoboController.java streamFileToResponse authorization CWE-639 | 4.3 | Medium | 2026-09-19 |
| CVE-2026-93954 | grimmory-tools grimmory Settings API Endpoint AppSettingController.java AppSettingController.getAppSettings authorization CWE-863 | 4.3 | Medium | 2026-09-19 |
| CVE-2026-42451 | Grimmory: Stored XSS via Malicious EPUB Enables Session Token Theft CWE-79 | 6.3 | Medium | 2026-05-08 |
All 3 known CVE vulnerabilities affecting grimmory with full Chinese analysis, references, and POCs where available.