What’s Vulnerable › Products

joey-zhou xiaozhi-esp32-server-java vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your joey-zhou xiaozhi-esp32-server-java version is affected

Latest joey-zhou xiaozhi-esp32-server-java vulnerabilities

• CVE-2026-111623 — Xiaozhi-esp32-server-java through 6.1.0 Authentication Bypass via OTA Endpoint Token Issuance (CVSS 5.6)
• CVE-2025-15135 — joey-zhou xiaozhi-esp32-server-java Cookie AuthenticationInterceptor.java tryAuthenticateWithCookies improper authentication (CVSS 6.3)
• CVE-2025-3382 — joey-zhou xiaozhi-esp32-server-java update sql injection (CVSS 6.3)