Skip to content
OpenAdvisories

Vendor

kerwincui

4 known vulnerabilities.

Products

FastBee 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-111654

    FastBee through 2.1.0 IDOR via /iot/group By-ID Endpoints

    FastBee through 2.1.0 contains an insecure direct object reference vulnerability that allows authenticated low-privilege users to access other users' device groups because GroupController queries lack owner checks. Attackers, including self-registered users, …

    kerwincui FastBee
  • Medium 4.3
    CVE-2026-7676

    kerwincui FastBee Tool Download Endpoint ToolController.java ToolController.download path traversal

    A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ToolController.java of the component Tool Download Endpo…

    kerwincui FastBee