Read the docs

vastxie

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

vastxie records in CISA KEV

No vastxie vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-75493 CVE-2026-111707 · GHSA-ghmq-xxc8-j8m5

Insecure direct object reference in 99AI exposes chat messages

Priority HIGH 70

99AI through 4.3.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to read other users' chat messages because querySingleChat lacks an owner check.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0031 Published 2026-10-16 No fix listed CWE-639
TI-2026-75492 CVE-2026-111706 · GHSA-q472-g8p5-86fq

Missing authentication in 99AI exposes all users' chat logs

Priority MEDIUM 44

99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00347 Published 2026-10-16 No fix listed CWE-306
Open these records in search →