What’s Vulnerable › Products

chenhg5 cc-connect vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your chenhg5 cc-connect version is affected

Latest chenhg5 cc-connect vulnerabilities

• CVE-2026-108549 — cc-connect through 1.5.0 Missing Authentication via MAX Webhook Sender Spoofing (CVSS 8.1)
• CVE-2026-92801 — cc-connect through 1.5.0 User Allowlist Bypass via Feishu Card Actions (CVSS 8.8)
• CVE-2026-76761 — chenhg5 cc-connect Management API engine.go shellExecCommand os command injection (CVSS 7.3)
• CVE-2026-76760 — chenhg5 cc-connect webhook.go authenticate code injection (CVSS 7.3)