CVE-2025-11046
Server-side request forgery in Tencent Weknora
CVSS score
9.8
EPSS probability
%0.5
Risk score
0.0
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
NVD reference
https://vuldb.com/?submit.658926
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2026-89040
Tencent Mass Service Engine in Cluster (MSEC) path traversal
T
Patch status unknownEPSS %1
9.8
CVE-2026-72565
Tencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form Bypass
T
Patch status unknownEPSS %1
7.5
CVE-2026-5585
Information exposure in Tencent AI Infra Guard
T
Patch status unknown Public Exploits:1EPSS %1
8.1
CVE-2024-22873
Server-side request forgery in Tencent Blueking Configuration Management Database
T
Patch status unknown Public Exploits:1EPSS %1
7.1
CVE-2026-84809
Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode
T
Patch verifiedEPSS %1
7.1
CVE-2026-91750
WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects
T
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-11046"