CyberSecBulletin

Lanshi17 vulnerabilities

We track 1 vulnerability in Lanshi17 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.

1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score

Latest Lanshi17 vulnerabilities

  • 8.2 High severity

    hugo_blog: Missing Authentication for Critical Functionality

    CVE-2026-68905Lanshi17

    Hugo Blog is a tech blog site. In commit 744ca15 and prior, the AI assistant proxy exposes three HTTP endpoints (POST /api/blog-assistant, POST /api/blog-search-embedding, POST /api/blog-search-rerank) without any authentication check. When deployed following