PatchSiren

diaowen CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW diaowen CVE published 2026-08-04

CVE-2026-18723

CVE-2026-18723 is a vulnerability in diaowen DWSurvey up to 6.14.0, affecting an unknown function of the file /api/dwsurvey/app/survey/up-survey-status.do, leading to improper authorization. The attack may be initiated remotely. The exploit has been publicly disclosed. Defenders should assess exposure and prioritize verification of affected systems. The vulnerability allows remote attacks, and defenders s [truncated]

LOW diaowen CVE published 2026-08-04

CVE-2026-18722

A vulnerability was found in diaowen DWSurvey up to 6.14.0, impacting the function in DwDeisgnSurveyController.devSurvey of the file /api/dwsurvey/app/v6/dw-design-survey/dev-survey.do, leading to authorization bypass. The attack can be launched remotely. The exploit has been made public and could be used. Defenders should assess exposure and prioritize verification and remediation efforts. This vulnerabi [truncated]