Vulnerabilities

TI-2026-00795 CVE-2026-1062 · GHSA-rh9h-pmww-rx47

xiweicheng TMS HtmlUtil.java summary server-side request forgery

MEDIUM 57

A flaw has been found in xiweicheng TMS up to 2.28.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00396 Published 2026-01-17 No fix listed CWE-918

TI-2026-00794 CVE-2026-1061 · GHSA-wch8-cq6g-885r

MEDIUM 57

A vulnerability was detected in xiweicheng TMS up to 2.28.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00396 Published 2026-01-17 No fix listed CWE-284

TI-2025-13506 CVE-2025-14801 · GHSA-fvh3-hc2j-x6cc

MEDIUM 55

A security vulnerability has been detected in xiweicheng TMS up to 2.28.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0028 Published 2025-12-17 No fix listed CWE-79