rachelos has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 7.3 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.3
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
1
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-111687Critical· 9.8WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint66CVE-2026-110617Medium· 4.8we-mp-rss through 1.5.3 contains a missing authorization vulnerability in the /api/v1/wx/tools/export/download endpoint that allows unauthenticated attackers to download export archives because its authentication dependency is commented …38
rachelos vulnerabilities
CVEs affecting rachelos, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-111687Critical· 9.8PoCWeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint
WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{feed_id} endpoint. Attackers can supply a non-built-in ex…
▾ Abyssalrachelos · we-mp-rssvia CVEORG
CVE-2026-110617Medium· 4.8PoCwe-mp-rss through 1.5.3 contains a missing authorization vulnerability in the /api/v1/wx/tools/export/download endpoint that allows unauthenticated attackers to download export archives because its authentication dependency is commented …
we-mp-rss through 1.5.3 contains a missing authorization vulnerability in the /api/v1/wx/tools/export/download endpoint that allows unauthenticated attackers to download export archives because its authentication dependency is commented …
▾ Twilightrachelos · we-mp-rssvia NVD