5.5
CVE-2026-15320
- EPSS 0.23%
- Veröffentlicht 10.07.2026 02:00:08
- Zuletzt bearbeitet 10.07.2026 16:16:26
- CVE-Watchlists
- Unerledigt
Sipeed PicoClaw pico.go rt.ReloadConfig authorization
A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. This vulnerability affects the function rt.ReloadConfig of the file pkg/channels/pico/pico.go. Performing a manipulation of the argument message.send results in missing authorization. It is possible to initiate the attack remotely. The exploit is now public and may be used. The reported GitHub issue was closed automatically due to inactivity.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerSipeed
≫
Produkt
PicoClaw
Version
0.2.0
Status
affected
Version
0.2.1
Status
affected
Version
0.2.2
Status
affected
Version
0.2.3
Status
affected
Version
0.2.4
Status
affected
Version
0.2.5
Status
affected
Version
0.2.6
Status
affected
Version
0.2.7
Status
affected
Version
0.2.8
Status
affected
Version
0.2.9
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.23% | 0.143 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cna@vuldb.com | 2.1 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| cna@vuldb.com | 5.4 | 2.8 | 2.5 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
|
| cna@vuldb.com | 5.5 | 8 | 4.9 |
AV:N/AC:L/Au:S/C:N/I:P/A:P
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-863 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
https://github.com/sipeed/picoclaw/
https://vuldb.com/vuln/377260
https://vuldb.com/vuln/377260/cti
https://vuldb.com/cve/CVE-2026-15320
https://vuldb.com/submit/852942
https://github.com/sipeed/picoclaw/issues/3071