aozorae

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

aozorae records in CISA KEV

No aozorae vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-85585 CVE-2026-123206 · GHSA-24j8-6f8g-7442

Missing authentication in EdgeChat lets users download attachments

MEDIUM 61

EdgeChat before 2.20.3 contains a missing authentication vulnerability in the GET /files/:key route that allows unauthenticated or banned users to download decrypted public-channel attachments because canAccessFile() acc…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00462 Published 2026-11-05 Fixed in 2.20.3 CWE-306

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0