CVE-2026-91750Medium· 6.5▾ TwilightPoC availableWeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint when downloading documents from user-supplied URLs. Authenticated attackers can bypass initial SSRF validation…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 35.8 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.3%
Exploit / PoC code exists
Last analysed / modified upstream
0.3% → 0.4%
WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint when downloading documents from user-supplied URLs. Authenticated attackers can bypass initial SSRF validation by supplying a public URL that redirects to internal network addresses, allowing access to internal services and cloud metadata.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-118376Medium· 5.3WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses
CVE-2026-108821Medium· 6.3A security vulnerability has been detected in Tencent WeKnora up to 0.8.1
CVE-2025-11046High· 7.3A security flaw has been discovered in Tencent WeKnora 0.1.0
CVE-2025-68616High· 7.5WeasyPrint helps web developers to create PDF documents
CVE-2026-116620High· 7.3Tencent RapidJSON Regex stream.h Take out-of-bounds
CVE-2026-112074Medium· 6.3Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow