T
Vendor security profile
tencent
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical3
CISA KEV0
Public exploit6
Patch rate%40
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
0
0
1
0
0
0
1
5
1
CVE KEV
CVE severity distribution
10toplam CVE
Critical3 (30%)
High4 (40%)
Medium2 (20%)
Low1 (10%)
Patch and exploitation view
%40
Verified patch
%0
CISA KEV
%60
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
5.3
CVE-2026-108821
Tencent WeKnora SQL Validator inject.go validateSubquery sql injection
T
Patch verifiedEPSS %0
7.1
CVE-2026-108581
Octop through 1.0.2b6 Missing Authorization Exposes Provider API Keys via /api/providers
T
Patch verifiedEPSS %0
2.4
CVE-2026-101080
Tencent AI-Infra-Guard File Access dir_actions.py startsWith path traversal
T
Patch verifiedEPSS %0
6.9
CVE-2026-94111
Tencent BrowserSkill through 0.3.0 Origin Validation Error in Local WebSocket Daemon
T
Patch status unknownEPSS %0
9.8
CVE-2026-89040
Tencent Mass Service Engine in Cluster (MSEC) path traversal
T
Patch status unknownEPSS %1
7.1
CVE-2026-91750
WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects
T
Patch verifiedEPSS %0
7.1
CVE-2026-84809
Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode
T
Patch verifiedEPSS %1
9.8
CVE-2026-72565
Tencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form Bypass
T
Patch status unknownEPSS %1
7.5
CVE-2026-5585
Information exposure in Tencent AI Infra Guard
T
Patch status unknownEPSS %1
9.8
CVE-2025-11046
Server-side request forgery in Tencent Weknora
T
Patch status unknownEPSS %0