7
CVEs
0
Critical
0
High
0
KEV
7
PoC
0
Unpatched C/H
0.0%
Patch Rate
0.3%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
0
MEDIUM
6
LOW
1
Monthly CVE Trend
Affected Products (1)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-16201 | Information disclosure in zevorn's rt-claw (all versions up to 0.2.0) is reachable remotely through manipulation of the claw_net_get and claw_net_post HTTP request functions in claw/services/tools/net.c, exposing sensitive data to unauthenticated network attackers. Publicly available exploit code exists (via GitHub issue #136), raising the practical exploitation threshold significantly. No vendor patch has been released; the project maintainer has not responded to the responsible disclosure report, leaving all deployed instances unmitigated. | MEDIUM | 5.5 | 0.3% | 48 |
PoC
No patch
|
| CVE-2026-16126 | Incorrect authorization in zevorn rt-claw up to version 0.2.0 allows remote unauthenticated attackers to bypass access controls in the Swarm RPC Receiver component, enabling unauthorized read, write, and availability impact against affected deployments. The flaw resides specifically in the handle_rpc_request function within claw/services/swarm/swarm.c, where authorization logic fails to correctly validate the calling actor. A publicly available proof-of-concept exploit exists, the project has not responded to responsible disclosure, and no patch has been released, leaving all installations on or below v0.2.0 without a vendor-provided fix. | MEDIUM | 5.5 | 0.3% | 48 |
PoC
No patch
|
| CVE-2026-16125 | Server-side request forgery in rt-claw up to 0.2.0 allows unauthenticated remote attackers to manipulate the `url` argument in the `claw_net_get` and `claw_net_post` HTTP request functions, coercing the server into issuing arbitrary outbound requests to internal or external resources. A proof-of-concept exploit has been publicly disclosed via GitHub issue #134. No vendor patch exists - the project maintainer was notified through responsible disclosure but has not responded, leaving deployments with no official fix path. | MEDIUM | 5.5 | 0.3% | 48 |
PoC
No patch
|
| CVE-2026-16127 | Server-side request forgery in zevorn rt-claw up to version 0.2.0 allows unauthenticated remote attackers to manipulate the url argument passed to the claw_net_get and claw_net_post functions in claw/tools/tool_net.c, causing the server to initiate arbitrary outbound HTTP requests. This can be leveraged to probe internal network resources, bypass perimeter controls, or interact with backend services not otherwise exposed. No public exploit identified at time of analysis beyond publicly available exploit code, and the vendor has not responded to the coordinated disclosure made via GitHub issue #139. | MEDIUM | 5.5 | 0.3% | 48 |
PoC
No patch
|
| CVE-2026-16128 | Server-side request forgery in zevorn rt-claw up to version 0.2.0 allows remote unauthenticated attackers to forge arbitrary HTTP requests via the `receiver_thread` function within the swarm service's `http_request` component (`claw/services/swarm/swarm.c`). The CVSS 4.0 vector confirms fully remote, unauthenticated, low-complexity exploitation with no user interaction required. A public proof-of-concept exists via GitHub issue #140, and the vendor had not responded to the coordinated disclosure at the time of reporting - no patch is available. | MEDIUM | 5.5 | 0.3% | 48 |
PoC
No patch
|
| CVE-2026-16200 | Incorrect authorization in zevorn rt-claw up to version 0.2.0 permits remote unauthenticated attackers to invoke privileged RPC functions without valid credentials. The flaw resides in the `claw_tool_invoke` function within the swarm service RPC Handler (`claw/services/swarm/swarm.c`), where authorization checks are insufficiently enforced, enabling authentication bypass. A publicly available proof-of-concept exploit exists via GitHub issue #133; no patch has been released and the project maintainer has not responded to the disclosure. | MEDIUM | 5.5 | 0.3% | 48 |
PoC
No patch
|
| CVE-2026-16204 | Code injection in zevorn rt-claw up to version 0.2.0 allows remote attackers to execute arbitrary code via the Telegram-to-AI Tool Execution Flow. The vulnerable function `tool_run_script_execute` in `claw/services/tools/script.c` fails to sanitize attacker-controlled input before passing it to script execution logic. A public proof-of-concept exploit has been released via GitHub issue #138, and the vendor has not yet responded to disclosure - no patch is available at time of analysis. | LOW | 2.1 | 0.3% | 31 |
PoC
No patch
|