joey-zhou has 1 CVE on record. 1 was published in the last 90 days. The median CVSS is 5.6 (medium).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 5.6
Publish → KEV: —
Last 90 days: 1 prev 0

Weakness classes

CWE-290 1

Products

xiaozhi-esp32-server-java 1

Follow joey-zhou:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-111623Medium· 5.6Xiaozhi-esp32-server-java through 6.1.0 Authentication Bypass via OTA Endpoint Token Issuance31

joey-zhou vulnerabilities

CVEs affecting joey-zhou, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-111623Medium· 5.6

Xiaozhi-esp32-server-java through 6.1.0 Authentication Bypass via OTA Endpoint Token Issuance

Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting /api/device/ota with any MAC address. Attackers can open …

▾ Sunlitjoey-zhou · xiaozhi-esp32-server-javavia CVEORG

joey-zhou vulnerabilities (CVEs) · VulnSea