niefy

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

niefy records in CISA KEV

No niefy vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-75485 CVE-2026-111699 · GHSA-jqmh-3xm7-92j3

Niefy wx-api Authentication Bypass via Unverified openid Cookie

MEDIUM 61

Niefy wx-api through 0.8.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to impersonate WeChat fans by supplying a raw openid cookie to fan-facing controllers.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00411 Published 2026-10-16 No fix listed CWE-306

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0