All 6 CVE vulnerabilities found in ipx, with AI-generated Chinese analysis, references, and POCs.
Vendor: unjs
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-63315 | Plaintext storage of a password in WebCTI CWE-256 | 8.2 | High | 2026-10-15 |
| CVE-2026-63314 | SQL Injection in WebCTI CWE-89 | 8.7 | High | 2026-10-15 |
| CVE-2026-35088 | Inadequate Encryption Strength in Slican telephone exchanges CWE-326 | 8.2 | High | 2026-10-15 |
| CVE-2026-35089 | Use of Weak Credentials in Slican telephone exchanges CWE-1391 | - | - | 2026-05-27 |
| CVE-2026-35087 | Authentication Bypass in Slican telephone exchanges CWE-288 | - | - | 2026-05-27 |
| CVE-2025-54387 | IPX is Vulnerable to Path Traversal via Prefix Matching Bypass CWE-22 | 6.8AI | Medium AI | 2025-08-05 |
All 6 known CVE vulnerabilities affecting ipx with full Chinese analysis, references, and POCs where available.