What’s Vulnerable › Products

xinnan-tech xiaozhi-esp32-server vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your xinnan-tech xiaozhi-esp32-server version is affected

Latest xinnan-tech xiaozhi-esp32-server vulnerabilities

• CVE-2026-119703 — xiaozhi-esp32-server through 0.9.8 Authentication Bypass via Spoofed Device-ID Header (CVSS 4.8)
• CVE-2026-116017 — Xiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint (CVSS 4.3)