Approved changes feed: RSS · Atom
cpe:2.3:a:unicomai:wanwu:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Unicomai (9f756e32-c447-5e49-92b1-864ddded9e22) |
|---|---|
| Product | Wanwu (723c4973-38d8-545a-a5ca-de3bdd83c366) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-108854 |
vulnerable | 2026-11-03 10:18:01.262658 |
Wanwu before 0.6.3 IDOR AppKey Deletion via DELETE /v1/appspace/app/key
MEDIUM (5.4)
Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any authenticated enabled user to delete other users' legacy AppKeys by supplying a numeric apiId. Attackers can iterate sequential key IDs against DELETE /v1/appspace/app/key to revoke AppKeys across organizations, breaking MCP and OpenAPI clients until owners issue new keys.
Published: 2026-10-11T13:26:03.304Z
Updated: 2026-10-18T11:53:05.593Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.