Product by Tencent
Tencent WeKnora
15 known vulnerabilities in Tencent WeKnora (Tencent), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-30861 | WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation | 10.0 | |
| Critical | CVE-2026-22688 | WeKnora has Command Injection in MCP stdio test | 10.0 | |
| Critical | CVE-2026-30860 | WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool | 10.0 | |
| High | CVE-2026-91750 | WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects | 6.5 | |
| High | CVE-2026-30855 | WeKnora: Broken Access Control in Tenant Management | 8.8 | |
| Medium | CVE-2026-108821 | Tencent WeKnora SQL Validator inject.go validateSubquery sql injection | 6.3 | |
| Medium | CVE-2026-118376 | WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses | 5.3 | |
| Critical | CVE-2025-11046 | Tencent WeKnora test testEmbeddingModel server-side request forgery | 7.3 | |
| High | CVE-2026-30858 | WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources | 6.5 | |
| High | CVE-2026-30247 | WeKnora: SSRF via Redirection | 5.9 | |
| Medium | CVE-2026-8786 | Tencent WeKnora: Authorization Bypass Through User-Controlled Key | 6.3 | |
| Critical | CVE-2026-22687 | WeKnora vulnerable to SQL Injection | 5.6 | |
| High | CVE-2026-30856 | Tencent WeKnora: Use of Incorrectly-Resolved Name or Reference | 5.9 | |
| Medium | CVE-2026-30857 | WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning | 5.3 | |
| Medium | CVE-2026-30859 | WeKnora: Broken Access Control - Cross-Tenant Data Exposure | 5.3 |