qaiu CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH qaiu CVE published 2026-10-16

CVE-2026-111612

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-16T17:38:51.828Z and has not been modified since then. The netdisk-fast-download package through version 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi. Defenders respon [truncated]