All 4 CVE vulnerabilities found in wanderer, with AI-generated Chinese analysis, references, and POCs.
Vendor: open-wanderer
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-71495 | Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Access CWE-918 | 10.0 | Critical | 2026-11-06 |
| CVE-2026-62346 | Wanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTML CWE-79 | 7.6 | High | 2026-11-06 |
| CVE-2026-62345 | Stored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML) CWE-79 | 7.6 | High | 2026-11-06 |
| CVE-2026-62344 | Wanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub Endpoints CWE-639 | 7.5 | High | 2026-11-06 |
All 4 known CVE vulnerabilities affecting wanderer with full Chinese analysis, references, and POCs where available.