N
Vendor security profile
NetEase
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs3
Critical2
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS8.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
3
CVE KEV
CVE severity distribution
3toplam CVE
Critical2 (67%)
High1 (33%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
8.2
CVE-2026-109424
NetEase Cloud Music Weak Encryption via eapi/xeapi
N
Patch status unknown
9.1
CVE-2026-109423
NetEase Cloud Music TLS Certificate Validation Bypass
N
Patch status unknown
9.2
CVE-2026-109422
NetEase Cloud Music RCE via os.navigateExternal IPC
N
Patch status unknown
6.9
CVE-2026-108156
LobsterAI 2026.5.27 through 2026.9.23 Arbitrary Directory Deletion via Skill _meta.json
N
Patch verifiedEPSS %0
5.3
CVE-2026-90818
netease-youdao LobsterAI Browser Network Configuration openclawConfigSync.ts OpenClawConfigSync.buildBrowserConfig server-side request forgery
N
Patch status unknownEPSS %1
8.7
CVE-2026-85671
QAnything 2.0.0 Unauthenticated Cross-User File Disclosure
N
Patch status unknownEPSS %1
5.3
CVE-2026-18995
netease-youdao LobsterAI MEDIA Path artifactParser.ts parseMediaTokensFromText information disclosure
N
Patch status unknownEPSS %0