Duhow Xiaoai-patch
2 CVEs affecting Duhow Xiaoai-patch. Latest disclosed: 2026-08-10. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-72580 | Critical | 9.8 | 2026-08-10 | An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smar… |
CVE-2026-72581 | High | 8.6 | 2026-08-10 | A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to make the Xiaomi smart speaker perfo… |