VYPR

WHartTest

by MGdaasLab

CVEs (1)

  • CVE-2026-111617MedOct 16, 2026
    risk 0.42cvss 6.5epss —

    WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a…