hangwin

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

hangwin records in CISA KEV

No hangwin vulnerabilities are listed in CISA KEV.

1 record

TI-2026-65531 CVE-2026-102878 · GHSA-wfc7-pjhg-rg95

HIGH 72

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00798 Published 2026-09-29 No fix listed CWE-346