Read the docs

MGdaasLab

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

MGdaasLab records in CISA KEV

No MGdaasLab vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-75403 CVE-2026-111617 · GHSA-6gwv-fx4p-w9x8

WHartTest Missing Authentication on UI-Automation WebSocket Endpoints

Priority HIGH 70

WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts ev…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00406 Published 2026-10-16 No fix listed CWE-306
TI-2026-83139 CVE-2026-119665 · GHSA-7v69-v46g-xrmg

WHartTest scheduled task APIs lack authorization across projects

Priority LOW 24

WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViewSet that allows authenticated users to access other projects' tasks.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00393 Published 2026-10-30 No fix listed CWE-862
Open these records in search →