All 3 CVE vulnerabilities found in kaneo, with AI-generated Chinese analysis, references, and POCs.
Vendor: usekaneo
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-125329 | Kaneo: Gitea integration access token and webhook secret exposed to any workspace member CWE-200 | 8.4 | High | 2026-11-10 |
| CVE-2025-71433 | Kaneo before 2.1.6 Missing Authorization Allows Cross-Workspace Data Access CWE-862 | 7.5 | High | 2026-10-14 |
| CVE-2026-63104 | Kaneo 2.3.12 < 2.12.2 Missing Authorization via Bulk Task Endpoint CWE-862 | 8.1 | High | 2026-09-22 |
All 3 known CVE vulnerabilities affecting kaneo with full Chinese analysis, references, and POCs where available.