Tencent vulnerabilities

Products

• Weknora 15
• Wechat 6
• Ai-infra-guard 3
• Ncnn 3
• Rapidjson 3
• Hunyuandit 2
• Libpag 2
• Qq 2
• Tencent 2
• Tface 2
• Tim 2

Newest

• tencent weknora WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses CVE-2026-118376 6.0 MediumOctober 28, 2026
• tencent rapidjson Tencent RapidJSON Regex stream.h Take out-of-bounds CVE-2026-116620 6.9 MediumOctober 27, 2026
• tencent ncnn Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow CVE-2026-112074 5.3 MediumOctober 19, 2026
• tencent ncnn Tencent ncnn MatMul matmul.cpp matmul_transb out-of-bounds CVE-2026-112073 5.3 MediumOctober 19, 2026
• tencent weknora Tencent WeKnora SQL Validator inject.go validateSubquery sql injection CVE-2026-108821 5.3 MediumOctober 12, 2026
• tencent ai-infra-guard Tencent AI-Infra-Guard File Access dir_actions.py startsWith path traversal CVE-2026-101080 2.4 LowSeptember 28, 2026
• tencent browserskill Tencent BrowserSkill through 0.3.0 Origin Validation Error in Local WebSocket Daemon CVE-2026-94111 6.9 MediumSeptember 20, 2026
• tencent mass service engine in cluster (msec) Tencent Mass Service Engine in Cluster (MSEC) path traversal CVE-2026-89040 9.3 CriticalSeptember 15, 2026
• tencent weknora WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects CVE-2026-91750 7.1 HighSeptember 15, 2026
• tencent ai-infra-guard, aig-skill-scan +1 more Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode CVE-2026-84809 7.1 HighSeptember 2, 2026
• tencent apijson Tencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form Bypass CVE-2026-72565 9.8 CriticalAugust 10, 2026
• tencent ncnn ncnn: Out-of-bounds heap write in ParamDict::load_param via unchecked negative parameter id CVE-2026-50144 7.1 HighJuly 15, 2026
• lenovo pc manager Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path CVE-2026-15515 7.3 HighJuly 13, 2026
• tencent weknora Tencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorization CVE-2026-8786 5.3 MediumMay 18, 2026
• tencent ai-infra-guard Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure CVE-2026-5585 6.9 MediumApril 5, 2026
• tencent weknora WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation CVE-2026-30861 Fix available 10.0 CriticalMarch 7, 2026
• tencent weknora WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool CVE-2026-30860 Fix available 10.0 CriticalMarch 6, 2026
• tencent weknora WeKnora: Broken Access Control - Cross-Tenant Data Exposure CVE-2026-30859 Fix available 5.3 MediumMarch 6, 2026
• tencent weknora WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources CVE-2026-30858 Fix available 6.5 MediumMarch 6, 2026
• tencent weknora WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning CVE-2026-30857 Fix available 5.3 MediumMarch 6, 2026
• tencent weknora WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection CVE-2026-30856 Fix available 5.9 MediumMarch 6, 2026
• tencent weknora WeKnora: Broken Access Control in Tenant Management CVE-2026-30855 Fix available 8.8 HighMarch 6, 2026
• tencent weknora WeKnora: SSRF via Redirection CVE-2026-30247 Fix available 5.9 MediumMarch 5, 2026
• tencent pcmanager A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on... CVE-2025-63946 Public exploit 7.4 HighFebruary 23, 2026
• tencent ioa A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on... CVE-2025-63945 Public exploit 7.4 HighFebruary 23, 2026
• tencent weknora WeKnora has Command Injection in MCP stdio test CVE-2026-22688 Fix available 10.0 CriticalJanuary 9, 2026
• tencent weknora WeKnora vulnerable to SQL Injection CVE-2026-22687 Fix available 5.6 MediumJanuary 9, 2026
• tencent facedetection-dsfd Tencent FaceDetection-DSFD resnet Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-13715 7.8 HighDecember 23, 2025
• tencent tface Tencent TFace restore_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-13709 7.8 HighDecember 23, 2025
• tencent tface Tencent TFace eval Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-13711 7.8 HighDecember 23, 2025
• tencent patrickstar Tencent PatrickStar merge_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-13706 7.8 HighDecember 23, 2025
• tencent neuralnlp-neuralclassifier Tencent NeuralNLP-NeuralClassifier _load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-13708 7.8 HighDecember 23, 2025
• tencent mimicmotion Tencent MimicMotion create_pipeline Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-13716 7.8 HighDecember 23, 2025
• tencent medicalnet Tencent MedicalNet generate_model Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-13714 7.8 HighDecember 23, 2025
• tencent hunyuanvideo Tencent HunyuanVideo load_vae Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-13710 7.8 HighDecember 23, 2025
• tencent hunyuandit Tencent HunyuanDiT model_resume Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-13707 7.8 HighDecember 23, 2025
• tencent hunyuandit Tencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-13712 7.8 HighDecember 23, 2025
• tencent hunyuan3d-1 Tencent Hunyuan3D-1 load_pretrained Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-13713 7.8 HighDecember 23, 2025
• tencent docs Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the... CVE-2025-56230 7.5 HighNovember 4, 2025
• tencent weknora Tencent WeKnora test testEmbeddingModel server-side request forgery CVE-2025-11046 6.9 MediumSeptember 26, 2025
• tencent wechat Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate... CVE-2024-40433 8.8 HighJuly 26, 2024
• tencent rapidjson Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Overflow CVE-2024-39684 Fix available 6.8 MediumJuly 9, 2024
• tencent rapidjson Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Underflow CVE-2024-38517 Fix available 6.8 MediumJuly 9, 2024
• tencent libpag, tencent +1 more Tencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile() in codec... CVE-2024-34408 5.3 MediumMay 3, 2024
• tencent libpag Tencent Libpag v4.3 is vulnerable to Buffer Overflow. A user can send a crafted image to trigger... CVE-2024-33078 9.8 CriticalMay 1, 2024
• tencent cmdb, blueking configuration management database +1 more Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery ... CVE-2024-22873 8.1 HighFebruary 26, 2024
• tencent distributed sql Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database... CVE-2023-52286 7.5 HighDecember 31, 2023
• tencent enterprise wechat privatization There is an interface unauthorized access vulnerability in the background of Tencent Enterprise... CVE-2023-40829 7.5 HighOctober 12, 2023
• tencent wxsync WordPress WxSync Plugin <= 2.7.23 is vulnerable to Cross Site Scripting (XSS) CVE-2023-39988 6.5 MediumSeptember 4, 2023
• tencent qq, tim +1 more In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine... CVE-2023-34312 Public exploit 7.8 HighJune 1, 2023
• Show olderLoading…