https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T08:49:15.928804+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-121557 fkie_cve-2026-121557 2026-11-05T08:49:15.929900+00:00

WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that allows unauthenticated attackers to send WhatsApp messages by calling the Chatwoot webhook route without verifyToken middleware. Attackers who know or guess a connected session name can POST outgoing message bodies to send arbitrary texts or files from that account to any number.

 https://db.gcve.eu/vuln/ghsa-cj7j-h23p-3c8m GHSA-cj7j-h23p-3c8m 2026-11-05T08:49:15.929965+00:00

WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that allows unauthenticated attackers to send WhatsApp messages by calling the Chatwoot webhook route without verifyToken middleware. Attackers who know or guess a connected session name can POST outgoing message bodies to send arbitrary texts or files from that account to any number.