Bufanyun vulnerabilities
We track 1 vulnerability in Bufanyun products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Bufanyun vulnerabilities
- 8.1 High severity
HotGo: Improper Authentication
HotGo 2.8.4 through 2.15.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to choose the SMS login verification code by supplying the Code field to /admin/sms/send. Attackers who know a user's mobile number can set a known