All 2 CVE vulnerabilities found in serena, with AI-generated Chinese analysis, references, and POCs.
Vendor: oraios
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-38924 | Serena 1.0.0 前 MCP HTTP 监听地址不安全 CWE-669 | 2.9 | Low | 2026-09-14 |
| CVE-2026-49471 | Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE CWE-306 | 8.3 | High | 2026-07-07 |
All 2 known CVE vulnerabilities affecting serena with full Chinese analysis, references, and POCs where available.