Read the docs

Chaitin

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Chaitin records in CISA KEV

No Chaitin vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-62495 CVE-2026-92749 · GHSA-9q3x-j473-5399

SafeLine through 9.4.1 Authentication Bypass via Weak Session Secret

Priority HIGH 75

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00712 Published 2026-09-16 No fix listed CWE-338
TI-2026-83820 CVE-2026-120428 · GHSA-7h72-q9rr-77j7

Stored cross-site scripting in PandaWiki via static file uploads

Priority MEDIUM 56

PandaWiki 3.65.0 through 3.87.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to upload HTML files with image extensions via /share/v1/common/file/upload.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00359 Published 2026-11-02 No fix listed CWE-79
Open these records in search →