xiaochong0302 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL xiaochong0302 CVE published 2026-10-16

CVE-2026-111675

CVE-2026-111675 debrief: Course-tencent-cloud through 2.0.1 Verification Code Brute Force Account Takeover allows unauthenticated attackers to brute force 6-digit SMS/email verification codes due to improper restriction of authentication attempts, potentially leading to account takeover. Defenders should prioritize verifying and remediating affected installations to prevent exploitation. The vulnerability [truncated]