vastxie CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH vastxie CVE published 2026-10-16

CVE-2026-111706

CVE-2026-111706 is a high-severity vulnerability in 99AI through version 4.3.0, allowing unauthenticated attackers to export all users' chat logs via the POST /api/chatLog/exportExcel route. This vulnerability has a CVSS score of 8.7 and is considered HIGH severity. The vulnerability allows attackers to send requests with controlled page, size, and optional email fields to download xlsx files containing u [truncated]