Smartloli Efak vulnerabilities

• smartloli efak EFAK 5.0.0 through 5.1.0 Missing Authorization via /api/model-config Exposes API Keys CVE-2026-111682 7.1 HighOctober 16, 2026
• smartloli efak EFAK through 5.1.0 Privilege Escalation via /api/users REST API CVE-2026-111681 8.7 HighOctober 16, 2026