All 3 CVE vulnerabilities found in xiaozhi-esp32-server-java, with AI-generated Chinese analysis, references, and POCs.
Vendor: joey-zhou
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-111623 | Xiaozhi-esp32-server-java through 6.1.0 Authentication Bypass via OTA Endpoint Token Issuance CWE-290 | 5.6 | Medium | 2026-10-16 |
| CVE-2025-15135 | joey-zhou xiaozhi-esp32-server-java Cookie AuthenticationInterceptor.java tryAuthenticateWithCookies improper authentication CWE-287 | 6.3 | Medium | 2025-12-28 |
| CVE-2025-3382 | joey-zhou xiaozhi-esp32-server-java update sql injection CWE-89 | 6.3 | Medium | 2025-04-07 |
All 3 known CVE vulnerabilities affecting xiaozhi-esp32-server-java with full Chinese analysis, references, and POCs where available.