Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how tencent compares to other vendors in security performance

View Risk Score →

Software

tencent weknora
11
tencent hunyuandit
6
tencent tface
6
tencent wechat
5
tencent facedetection-dsfd
3
tencent hunyuan3d-1
3
tencent hunyuanvideo
3
tencent medicalnet
3
tencent mimicmotion
3
tencent neuralnlp-neuralclassifier
3
tencent patrickstar
3
tencent distributed sql
2
tencent libpag
2
tencent pc manager
2
tencent qq
2
tencent tim
2
tencent ai-infra-guard
1
tencent apijson
1
tencent blueking cmdb
1
tencent blueking configuration management database
1
tencent cloudbase-mcp
1
tencent docs
1
tencent docs desktop
1
tencent enterprise wechat privatization
1
tencent gameloop
1
tencent habomalhunter
1
tencent hunyuan3d
1
tencent ioa
1
tencent ioa windows
1
tencent microblogpad
1
tencent microvision
1
tencent mobileqq
1
tencent music supersonic
1
tencent pcmanager windows
1
tencent qmudisk driver
1
tencent qq browser
1
tencent qqmail
1
tencent qqpimsecure
1
tencent qqpphoto
1
tencent vconsole
1
tencent wblog
1
tencent wesing
1
tencent wxsync wordpress
1
tencentos tiny
1
tencentos-tiny
1

Tencent APIJSONTencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form Bypass

Risk 86
Severity
9.8
First published (updated )
CVE-2026-72565

Tencent PC ManagerTencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path

Risk 63
Severity
6.4
First published (updated )
CVE-2026-15515

Tencent WeKnoraTencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorization

Risk 33
Severity
2.1
EPSS
0.27%
First published (updated )
CVE-2026-8786

Tencent CloudBase-MCPTencentCloudBase CloudBase-MCP open-url API Endpoint interactive-server.ts openUrl server-side request forgery

Risk 37
Severity
5.5
EPSS
0.06%
First published (updated )
CVE-2026-7221

Tencent AI-Infra-GuardTencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure

Risk 31
Severity
5.5
EPSS
0.01%
First published (updated )
CVE-2026-5585
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

go/github.com/Tencent/WeKnoraWeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation

Risk 59
Severity
10
EPSS
0.23%
First published (updated )
CVE-2026-30861

go/github.com/Tencent/WeKnoraWeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool

Risk 59
Severity
10
EPSS
0.18%
First published (updated )
CVE-2026-30860

go/github.com/Tencent/WeKnoraWeKnora: Broken Access Control - Cross-Tenant Data Exposure

Risk 31
Severity
7.5
EPSS
0.04%
First published (updated )
CVE-2026-30859

go/github.com/Tencent/WeKnoraWeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources

Risk 31
Severity
7.5
EPSS
0.09%
First published (updated )
CVE-2026-30858

go/github.com/Tencent/WeKnoraWeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning

Risk 26
Severity
5.9
EPSS
0.03%
First published (updated )
CVE-2026-30857
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

go/github.com/Tencent/WeKnoraWeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection

Risk 41
Severity
7.6
EPSS
0.04%
First published (updated )
CVE-2026-30856

go/github.com/Tencent/WeKnoraWeKnora: Broken Access Control in Tenant Management

Risk 61
Severity
9.8
EPSS
0.13%
First published (updated )
CVE-2026-30855

go/github.com/Tencent/WeKnoraWeKnora: SSRF via Redirection

Risk 31
Severity
7.5
EPSS
0.04%
First published (updated )
CVE-2026-30247

Tencent iOARace Condition

Risk 67
Severity
7.4
First published (updated )
CVE-2025-63945

Tencent PC ManagerRace Condition

Risk 67
Severity
7.4
First published (updated )
CVE-2025-63946
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WeKnora WeKnoraWeKnora has Command Injection in MCP stdio test

Risk 59
Severity
10
EPSS
0.37%
First published (updated )
CVE-2026-22688

WeKnoraWeKnora vulnerable to SQL Injection

Risk 61
Severity
9.8
EPSS
0.06%
First published (updated )
CVE-2026-22687

Tencent FaceDetection-DSFDTencent FaceDetection-DSFD resnet Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 68
Severity
7.8
First published (updated )
CVE-2025-13715

Tencent TFaceTencent TFace restore_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 68
Severity
7.8
First published (updated )
CVE-2025-13709

Tencent TFaceTencent TFace eval Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 68
Severity
7.8
First published (updated )
CVE-2025-13711
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Tencent PatrickStarTencent PatrickStar merge_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 68
Severity
7.8
First published (updated )
CVE-2025-13706

Tencent NeuralNLP-NeuralClassifierTencent NeuralNLP-NeuralClassifier _load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 68
Severity
7.8
First published (updated )
CVE-2025-13708

Tencent MimicMotionTencent MimicMotion create_pipeline Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 68
Severity
7.8
First published (updated )
CVE-2025-13716

Tencent MedicalNetTencent MedicalNet generate_model Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 68
Severity
7.8
First published (updated )
CVE-2025-13714

Tencent HunyuanVideoTencent HunyuanVideo load_vae Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 68
Severity
7.8
First published (updated )
CVE-2025-13710
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Tencent HunyuanDiTTencent HunyuanDiT model_resume Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 68
Severity
7.8
First published (updated )
CVE-2025-13707

Tencent HunyuanDiTTencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 68
Severity
7.8
First published (updated )
CVE-2025-13712

Tencent Hunyuan3D-1Tencent Hunyuan3D-1 load_pretrained Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 68
Severity
7.8
First published (updated )
CVE-2025-13713

Tencent FaceDetection-DSFDTencent FaceDetection-DSFD resnet Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 68
Severity
7.8
First published (updated )
Advisory
ZDI-25-1183

Tencent FaceDetection-DSFDZDI-25-1183: Tencent FaceDetection-DSFD resnet Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 68
Severity
7.8
First published (updated )
ZDI-CAN-27197
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203