Vulnerabilities

TI-2026-61525 CVE-2026-90507 · GHSA-29fp-xrf7-2x4f

vvbbnn00 WARP-Clash-API Subscription subscription.py get_surge_subscription access control

MEDIUM 57

A vulnerability was identified in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00378 Published 2026-09-13 No fix listed CWE-266

TI-2026-61524 CVE-2026-90506 · GHSA-qmhq-94p4-9589

MEDIUM 45

A vulnerability was determined in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00251 Published 2026-09-13 No fix listed CWE-362

TI-2026-61523 CVE-2026-90505 · GHSA-jj5q-r2mq-29xr

MEDIUM 45

A vulnerability was found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00251 Published 2026-09-13 No fix listed CWE-362

TI-2026-61522 CVE-2026-90504 · GHSA-5436-f3r8-9r98

HIGH 70

A vulnerability has been found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00654 Published 2026-09-13 No fix listed CWE-287