Read the docs

yincongcyincong

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

yincongcyincong records in CISA KEV

No yincongcyincong vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-83134 CVE-2026-119660 · GHSA-77p8-2qmx-794p

Authentication bypass in MuseBot via hard-coded session key

Priority HIGH 81

MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using the hard-coded default session_key 'muse_bot_session_key'.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0052 Published 2026-10-30 Fixed in 2.0.0 CWE-1394
Open these records in search →