Skip to content

CVE-2026-7677

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
May 3, 2026
Last Seen
May 3, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Multiple Vulnerabilities Discovered in kerwincui FastBee Software72.0

Two critical vulnerabilities have been identified in kerwincui FastBee versions up to 1.2.1. CVE-2026-7676 affects the Tool Download Endpoint, allowing path traversal through the fileName argument in the ToolController.download function. CVE-2026-7677 impacts the System Notice Handler, enabling cros...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Cwe-79 - Cross-site Scripting (xss)XSS