Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Tencent — Vulnerabilities & Security Advisories 38

Browse all 38 CVE security advisories affecting Tencent. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Tencent operates as a global technology conglomerate, primarily known for its social networking platforms, cloud services, and digital entertainment ecosystems. With twenty-nine recorded Common Vulnerabilities and Exposures (CVEs), the company’s historical security landscape reveals a pattern of typical enterprise software flaws. These incidents predominantly involve remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from complex web applications and backend infrastructure components. While no single catastrophic breach has defined its public security narrative, the volume of disclosed issues highlights the challenges inherent in maintaining vast, interconnected digital services. The company’s security posture reflects standard industry risks associated with large-scale software development, where diverse product lines create multiple attack surfaces. Continuous patching and rigorous code review processes remain essential for mitigating these recurring technical defects across its extensive portfolio of consumer and enterprise tools.

Found 13 results / 38 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-91750 WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects — WeKnora CWE-918 6.5 Medium 2026-09-15
CVE-2026-8786 Tencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorization — WeKnora CWE-639 6.3 Medium 2026-05-18
CVE-2026-30861 WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation — WeKnora CWE-78 10.0 Critical 2026-03-07
CVE-2026-30860 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool — WeKnora CWE-89 10.0 Critical 2026-03-07
CVE-2026-30859 WeKnora: Broken Access Control - Cross-Tenant Data Exposure — WeKnora CWE-284 5.3 Medium 2026-03-07
CVE-2026-30858 WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources — WeKnora CWE-918 6.5 Medium 2026-03-07
CVE-2026-30857 WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning — WeKnora CWE-639 5.3 Medium 2026-03-07
CVE-2026-30856 WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection — WeKnora CWE-706 5.9 Medium 2026-03-07
CVE-2026-30855 WeKnora: Broken Access Control in Tenant Management — WeKnora CWE-284 8.8 High 2026-03-07
CVE-2026-30247 WeKnora: SSRF via Redirection — WeKnora CWE-918 5.9 Medium 2026-03-07
CVE-2026-22688 WeKnora has Command Injection in MCP stdio test — WeKnora CWE-77 10.0 Critical 2026-01-10
CVE-2026-22687 WeKnora vulnerable to SQL Injection — WeKnora CWE-89 5.6 Medium 2026-01-10
CVE-2025-11046 Tencent WeKnora test testEmbeddingModel server-side request forgery — WeKnora CWE-918 7.3 High 2025-09-26

This page lists every published CVE security advisory associated with Tencent. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.