https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T05:36:16.500645+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111698 fkie_cve-2026-111698 2026-10-20T05:36:16.521218+00:00

HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp PayController.xcxRecharge endpoint that allows attackers to modify any member's wallet balance without payment. Attackers can send requests with arbitrary amount and userId parameters to credit or reduce balances and consume charging services for free.

 https://db.gcve.eu/vuln/ghsa-g757-7gqj-36w5 GHSA-g757-7gqj-36w5 2026-10-20T05:36:16.521297+00:00

HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp PayController.xcxRecharge endpoint that allows attackers to modify any member's wallet balance without payment. Attackers can send requests with arbitrary amount and userId parameters to credit or reduce balances and consume charging services for free.