CyberSecBulletin

Javahuang vulnerabilities

We track 2 vulnerabilities in Javahuang products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.

2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score

Latest Javahuang vulnerabilities

  • 7.1 High severity

    SurveyKing: Authorization Bypass Through User-Controlled Key

    CVE-2026-129153Javahuang

    SurveyKing 1.12.0 through 1.13.2 contains an authorization bypass in the linked survey feature that fails to verify the referenced linkSurveyId belongs to the caller's own project. Authenticated attackers can point a linked option at another user's survey so t

  • 7.5 High severity

    SurveyKing: Missing Authorization

    CVE-2026-129151Javahuang

    SurveyKing 1.13.2 contains a missing authorization vulnerability in result lookup: the anonymous survey view leaks the lookup configuration, including its password, and the lookup password check is skipped when no answer is sent. Unauthenticated attackers with