Dianping

3 CVEs in 1 Dianping product, including Cat. Newest: CVE-2026-124506 (2026-11-09). Severity, EPSS and public exploits for each.

Dianping products with known CVEs

ProductCVEs
Cat3
Dianping CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-124506Medium4.32026-11-09A vulnerability has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This vulnerability affects the function Model.getDomain of the file WEB-INF/tags/hourlyRepo…
CVE-2026-124505Medium4.32026-11-09A flaw has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This affects the function Handler.redirect of the file Handler.java of the component Login/Logout. E…
CVE-2026-85181Critical9.82026-09-03CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline…