Vendors / bufanyun Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now bufanyun records in CISA KEV No bufanyun vulnerabilities are listed in CISA KEV.
Priority HIGH 75
HotGo 2.8.4 through 2.15.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to choose the SMS login verification code by supplying the Code field to /admin/sms/send.
CVSS 4.0 CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00531 · Published 2026-11-02 · No fix listed CWE-287
Priority MEDIUM 57
A vulnerability was detected in bufanyun HotGo up to 2.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00234 · Published 2026-03-07 · No fix listed CWE-918
Priority MEDIUM 56
A weakness has been identified in bufanyun HotGo 1.0/2.0.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00248 · Published 2026-04-01 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 0 2 0 0
