CVEs we hold for Tencent

Records whose assigning authority named Tencent as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-91750WeKnora before 0.7.0 SSRF via Unvalidated HTTP RedirectsTencent WeKnora

CVE-2026-89040Tencent Mass Service Engine in Cluster (MSEC) path traversalTencent Mass Service Engine in Cluster (MSEC)

CVE-2026-8786Tencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorizationTencent WeKnora

CVE-2026-84809Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python BytecodeTencent aig-skill-scan

CVE-2026-72565Tencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form BypassTencent APIJSON

CVE-2026-7221TencentCloudBase CloudBase-MCP open-url API Endpoint interactive-server.ts openUrl server-side request forgeryTencentCloudBase CloudBase-MCP

CVE-2026-5585Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosureTencent AI-Infra-Guard

CVE-2026-50144ncnn: Out-of-bounds heap write in ParamDict::load_param via unchecked negative parameter idTencent ncnn

CVE-2026-30861WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration ValidationTencent WeKnora

CVE-2026-30860WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query ToolTencent WeKnora

CVE-2026-30859WeKnora: Broken Access Control - Cross-Tenant Data ExposureTencent WeKnora

CVE-2026-30858WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal ResourcesTencent WeKnora

CVE-2026-30857WeKnora: Unauthorized Cross‑Tenant Knowledge Base CloningTencent WeKnora

CVE-2026-30856WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt InjectionTencent WeKnora

CVE-2026-30855WeKnora: Broken Access Control in Tenant ManagementTencent WeKnora

CVE-2026-30247WeKnora: SSRF via RedirectionTencent WeKnora

CVE-2026-22688WeKnora has Command Injection in MCP stdio testTencent WeKnora

CVE-2026-22687WeKnora vulnerable to SQL InjectionTencent WeKnora

CVE-2026-15515Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search pathTencent PC Manager

CVE-2025-3164Tencent Music Entertainment SuperSonic H2 Database Connection testConnect code injectionTencent Music Entertainment SuperSonic

CVE-2025-13716Tencent MimicMotion create_pipeline Deserialization of Untrusted Data Remote Code Execution VulnerabilityTencent MimicMotion

CVE-2025-13715Tencent FaceDetection-DSFD resnet Deserialization of Untrusted Data Remote Code Execution VulnerabilityTencent FaceDetection-DSFD

CVE-2025-13714Tencent MedicalNet generate_model Deserialization of Untrusted Data Remote Code Execution VulnerabilityTencent MedicalNet

CVE-2025-13713Tencent Hunyuan3D-1 load_pretrained Deserialization of Untrusted Data Remote Code Execution VulnerabilityTencent Hunyuan3D-1

CVE-2025-13712Tencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution VulnerabilityTencent HunyuanDiT

CVE-2025-13711Tencent TFace eval Deserialization of Untrusted Data Remote Code Execution VulnerabilityTencent TFace

CVE-2025-13710Tencent HunyuanVideo load_vae Deserialization of Untrusted Data Remote Code Execution VulnerabilityTencent HunyuanVideo

CVE-2025-13709Tencent TFace restore_checkpoint Deserialization of Untrusted Data Remote Code Execution VulnerabilityTencent TFace

CVE-2025-13708Tencent NeuralNLP-NeuralClassifier _load_checkpoint Deserialization of Untrusted Data Remote Code Execution…Tencent NeuralNLP-NeuralClassifier

CVE-2025-13707Tencent HunyuanDiT model_resume Deserialization of Untrusted Data Remote Code Execution VulnerabilityTencent HunyuanDiT

CVE-2025-13706Tencent PatrickStar merge_checkpoint Deserialization of Untrusted Data Remote Code Execution VulnerabilityTencent PatrickStar

CVE-2025-11046Tencent WeKnora test testEmbeddingModel server-side request forgeryTencent WeKnora

CVE-2024-39684Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer…Tencent RapidJSON

CVE-2024-38517Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer…Tencent RapidJSON

CVE-2021-27439TencentOS-tiny Integer Overflow or WraparoundTencentOS-tiny

CVE-2021-27247no title heldTencent WeChat

CVE-2020-27874no title heldTencent WeChat

CVE-2019-17151no title heldTencent WeChat

CVE-2018-11616no title heldTencent Foxmail

39 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.