CyberSecBulletin

Hangwin vulnerabilities

We track 1 vulnerability in Hangwin products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 29, 2026.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest Hangwin vulnerabilities

  • 8.1 High severity

    mcp-chrome-bridge: Origin Validation Error

    CVE-2026-102878Hangwin

    mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser