Duhow

2 CVEs across 1 Duhow products. Browse Duhow vulnerabilities, severities, and proof-of-concept exploits.

Duhow products with known CVEs

ProductCVEs
Xiaoai-Patch2
Duhow CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-72581High8.62026-08-10A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to make the Xiaomi smart speaker perfo…
CVE-2026-72580Critical9.82026-08-10An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smar…