Browse all 10 CVE security advisories affecting Xinhu. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Xinhu operates primarily in enterprise resource planning and government information systems, serving as a critical infrastructure component. Historically, its vulnerabilities have frequently included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation and access controls. The platform's widespread deployment in sensitive sectors has made it a target for exploitation, with several high-severity vulnerabilities enabling unauthorized system access. While no major public breaches have been definitively attributed to Xinhu vulnerabilities, its CVE history indicates persistent security challenges, particularly in web application components and authentication mechanisms that continue to pose risks to deployed environments.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-108571 | Xinhu Rainrock RockOA Openkqj Action openkqjAction.php returnchuli sql injection — Rainrock RockOA CWE-89 | 7.3 | High | 2026-10-11 |
| CVE-2026-84153 | Xinhu Rainrock RockOA index.php toaddval sql injection — Rainrock RockOA CWE-89 | 6.3 | Medium | 2026-09-01 |
| CVE-2026-84109 | Xinhu Rainrock RockOA webmainAction.php getOrder sql injection — Rainrock RockOA CWE-89 | 6.3 | Medium | 2026-09-01 |
| CVE-2026-0588 | Xinhu Rainrock RockOA API rockfun.php cross site scripting — Rainrock RockOA CWE-79 | 3.5 | Low | 2026-01-05 |
| CVE-2026-0587 | Xinhu Rainrock RockOA Cover Image rock_page_gong.php cross site scripting — Rainrock RockOA CWE-79 | 3.5 | Low | 2026-01-05 |
This page lists every published CVE security advisory associated with Xinhu. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.