Skip to content
OpenAdvisories

Vendor

vvbbnn00

4 known vulnerabilities.

Products

WARP-Clash-API 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-90507

    vvbbnn00 WARP-Clash-API Subscription subscription.py get_surge_subscription access control

    A vulnerability was identified in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. Affected is the function get_surge_subscription of the file services/subscription.py of the component Subscription Handler. Such manipulation of the argu…

    vvbbnn00 WARP-Clash-API
  • Medium 5.0
    CVE-2026-90506

    vvbbnn00 WARP-Clash-API Save Account Job race condition

    A vulnerability was determined in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This impacts an unknown function of the component Save Account Job. This manipulation causes race condition. The attack may be initiated remotely. The at…

    vvbbnn00 WARP-Clash-API
  • Medium 5.0
    CVE-2026-90505

    vvbbnn00 WARP-Clash-API doUpdateLicenseKey race condition

    A vulnerability was found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This affects the function doUpdateLicenseKey. The manipulation results in race condition. The attack can be launched remotely. The attack requires a high leve…

    vvbbnn00 WARP-Clash-API