Duhow

2 CVEs in 1 Duhow product, including Xiaoai-Patch. Newest: CVE-2026-72581 (2026-08-10). Severity, EPSS and public exploits for each.

Duhow products with known CVEs

ProductCVEs
Xiaoai-Patch2
Duhow CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-72581High8.62026-08-10A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to make the Xiaomi smart speaker perfo…
CVE-2026-72580Critical9.82026-08-10An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smar…