dianping

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

dianping records in CISA KEV

No dianping vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-58514 CVE-2026-85181 · GHSA-xrx5-jvp4-rqmj

CAT through 3.1.0 Session Cookie Forgery via Unkeyed hashCode Checksum

MEDIUM 49

CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00705 Published 2026-09-03 No fix listed CWE-565

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0