labring FastGPT

Name: labring FastGPT
Brand: labring

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical3high5medium0low

updated 2026-10-27

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-49131US	critical9.9	0.46% (39th)	Exploit	no fix	2025-06-09	≤ < 4.9.11
CVE-2026-32128US	—	0.31% (23rd)	Exploit	no fix	2026-03-11	≤ ≤ 4.14.7
CVE-2026-33075US	high8.8OT high	0.30% (23rd)	Exploit	no fix	2026-03-20	≤ ≤ 4.14.8.3
CVE-2026-42302US	—OT elevated	0.72% (54th)	—	4.14.13	2026-05-08	4.14.10, → 4.14.13
CVE-2026-40351US	—	0.63% (50th)	—	no fix	2026-04-17	≤ < 4.14.9.5
CVE-2026-55418US	—	0.48% (41st)	—	no fix	2026-07-07	≤ < 4.15.0-beta5
CVE-2026-34162US	critical10.0OT elevated	0.42% (36th)	—	no fix	2026-03-31	≤ < 4.14.9.5
CVE-2026-61684US	—OT elevated	0.39% (33rd)	—	no fix	2026-07-15	≤ = 4.15.0-beta4
CVE-2026-40352US	—	0.38% (32nd)	—	no fix	2026-04-17	≤ < 4.14.9.5
CVE-2026-54607US	—	0.37% (31st)	—	no fix	2026-07-07	≤ < 4.15.0-beta4
CVE-2026-61646US	—	0.36% (30th)	—	no fix	2026-07-15	≤ < 4.15.0-beta5
CVE-2026-54602US	—	0.36% (30th)	—	no fix	2026-07-07	≤ < 4.15.0
CVE-2026-40252US	high8.1	0.34% (28th)	—	no fix	2026-04-10	≤ < 4.14.10.4
CVE-2026-61644US	—OT elevated	0.31% (24th)	—	4.15.0-beta5	2026-07-15	4.14.17, → 4.15.0-beta5
CVE-2026-54601US	—	0.30% (22nd)	—	4.15.0-beta4	2026-07-07	4.14.17, → 4.15.0-beta4
CVE-2026-34163US	high7.7	0.28% (21st)	—	no fix	2026-03-31	≤ < 4.14.9.5
CVE-2025-27600US	medium6.5	0.27% (20th)	—	no fix	2025-03-06	≤ < 4.9.0
CVE-2026-26003US	medium5.4	0.27% (20th)	—	4.14.5-fix	2026-02-10	4.14.0, → 4.14.5-fix
CVE-2026-42343US	—	0.27% (19th)	—	no fix	2026-05-08	≤ ≤ 4.14.13
CVE-2025-52552US	medium6.1	0.27% (19th)	—	no fix	2025-06-21	≤ < 4.9.12
CVE-2026-44285US	—	0.26% (18th)	—	no fix	2026-05-29	≤ < 4.15.0-beta1
CVE-2026-40100US	—	0.25% (17th)	—	no fix	2026-04-10	≤ < 4.14.10.3
CVE-2026-44287US	—	0.24% (15th)	—	no fix	2026-05-29	≤ < 4.15.0-beta1
CVE-2025-62612US	medium5.3	0.24% (15th)	—	no fix	2025-10-22	≤ < 4.11.1
CVE-2026-44284US	—	0.24% (14th)	—	no fix	2026-05-08	≤ < 4.14.17
CVE-2026-44286US	—	0.23% (14th)	—	no fix	2026-05-08	≤ < 4.14.17
CVE-2026-50562US	—OT elevated	0.21% (12th)	—	no fix	2026-07-15	≤ ≤ 22ebfacbb43311e9b73294040ae0eb87390c6bba
CVE-2026-42345US	—	0.21% (12th)	—	no fix	2026-05-08	≤ ≤ 4.14.11
CVE-2026-61643US	—OT elevated	0.19% (9th)	—	4.15.0-beta5	2026-07-15	4.14.17, → 4.15.0-beta5
CVE-2026-42344US	—	0.15% (4th)	—	no fix	2026-05-08	≤ ≤ 4.14.11
CVE-2026-26075US	medium5.4	0.12% (2nd)	—	no fix	2026-02-12	≤ < 4.14.7

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-918Server-Side Request Forgery (SSRF)11 CVEs
CWE-639Authorization Bypass Through User-Controlled Key3 CVEs
CWE-184Incomplete List of Disallowed Inputs2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-494Download of Code Without Integrity Check2 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-829Inclusion of Functionality from Untrusted Control Sphere2 CVEs
CWE-863Incorrect Authorization2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan