CVE-2026-8786

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-8786

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-8786.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-8786

Published

2026-05-18T03:00:14.994Z

Modified

2026-08-12T03:51:36.694996341Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

Tencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorization

Details

A vulnerability has been found in Tencent WeKnora up to 0.3.6. Affected by this issue is the function getKnowledgeBaseForInitialization of the file internal/handler/initialization.go of the component Config API Endpoint. The manipulation of the argument kbId leads to authorization bypass. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cwe_ids": [
        "CWE-285",
        "CWE-639"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/8xxx/CVE-2026-8786.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "0.3.0"
                },
                {
                    "last_affected": "0.3.0"
                },
                {
                    "introduced": "0.3.1"
                },
                {
                    "last_affected": "0.3.1"
                },
                {
                    "introduced": "0.3.2"
                },
                {
                    "last_affected": "0.3.2"
                },
                {
                    "introduced": "0.3.3"
                },
                {
                    "last_affected": "0.3.3"
                },
                {
                    "introduced": "0.3.4"
                },
                {
                    "last_affected": "0.3.4"
                },
                {
                    "introduced": "0.3.5"
                },
                {
                    "last_affected": "0.3.5"
                },
                {
                    "introduced": "0.3.6"
                },
                {
                    "last_affected": "0.3.6"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/tencent/weknora

Affected ranges

Type

GIT

Repo

https://github.com/tencent/weknora

Events

Introduced

Last affected

7604b793eb5ab83a55a1ccb90548c3a87207a825

Database specific

Show details

{
    "cpe": "cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.6"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v0.*

v0.1.0

v0.1.1

v0.1.2

v0.1.3

v0.1.5

v0.1.6

v0.2.0

v0.2.1

v0.2.10

v0.2.11

v0.2.12

v0.2.13

v0.2.14

v0.2.2

v0.2.3

v0.2.4

v0.2.5

v0.2.6

v0.2.7

v0.2.8

v0.2.9

v0.3.0

v0.3.1

v0.3.2

v0.3.3

v0.3.4

v0.3.5

v0.3.6

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-8786.json"