Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: apconw Clear all filters
TI-2026-76660 CVE-2026-77926

Aix-DB Authenticated RCE via ChatBI Common Agent Execute Tool

Priority HIGH 73

Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00851 Published 2026-10-20 No fix listed CWE-749
TI-2026-57185 CVE-2026-82881 · GHSA-mjx6-rhcw-h3f9

Aix-DB through 1.2.4 Stored Cross-Site Scripting via Markdown

Priority MEDIUM 56

Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00314 Published 2026-08-31 Fixed CWE-79