All 2 CVE vulnerabilities found in remark42, with AI-generated Chinese analysis, references, and POCs.
Vendor: umputun
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-77463 | Remark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deployment CWE-348 | 6.5 | Medium | 2026-11-05 |
| CVE-2026-48788 | Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing CWE-79 | - | - | 2026-06-16 |
All 2 known CVE vulnerabilities affecting remark42 with full Chinese analysis, references, and POCs where available.