MGdaasLab CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM MGdaasLab CVE published 2026-10-16

CVE-2026-111617

WHartTest through 2.8.1 contains a missing authentication vulnerability on UI-Automation WebSocket endpoints. Attackers can connect to /ws/ui/web/ and /ws/ui/actuator/ without authentication, allowing them to intercept test-case payloads, receive broadcast step results, and spoof results and screen frames into victim sessions. This vulnerability allows unauthenticated attackers to potentially intercept te [truncated]