asternic wuzapi vulnerabilities, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 5.3CVE-2026-126807EPSS 0.3%2026-11-11

   WuzAPI through 1.1.0 contains a cross-tenant information disclosure vulnerability in the GetHistory handler that allows authenticated users to view other tenants' chat metadata. Attackers with message history enabled can request GET /chat/…