{"schema_version":1,"title":"Tencent vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 9 vulnerabilities in Tencent: 1 in the last 7 days and 6 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-94111, was published on 20 September 2026.","url":"https://junglewise.ai/threats/vendors/tencent","json_url":"https://junglewise.ai/threats/vendors/tencent.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/tencent","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":2,"all_time":9,"critical":2,"exploited":0,"last_7_days":1,"last_30_days":4,"last_90_days":6,"last_365_days":9},"latest":[{"cve":"CVE-2026-94111","cvss":6.6,"epss":0.0014,"slug":"cve-2026-94111-tencent-browserskill-through-0-3-0-contains-an-authentication","title":"Tencent BrowserSkill authentication bypass in WebSocket origin validation","severity":"medium","exploited":false,"published_at":"2026-09-20T12:17:06.787+00:00","url":"https://junglewise.ai/threats/cve-2026-94111-tencent-browserskill-through-0-3-0-contains-an-authentication"},{"cve":"CVE-2026-89040","cvss":9.8,"epss":0.0114,"slug":"cve-2026-89040-tencent-msec-path-traversal-to-remote-code-execution","title":"Tencent MSEC path traversal to remote code execution","severity":"critical","exploited":false,"published_at":"2026-09-15T20:19:20.24+00:00","url":"https://junglewise.ai/threats/cve-2026-89040-tencent-msec-path-traversal-to-remote-code-execution"},{"cve":"CVE-2026-91750","cvss":6.5,"epss":0.0044,"slug":"cve-2026-91750-tencent-weknora-ssrf-via-unvalidated-http-redirects","title":"Tencent WeKnora SSRF via unvalidated HTTP redirects","severity":"medium","exploited":false,"published_at":"2026-09-15T01:16:54.63+00:00","url":"https://junglewise.ai/threats/cve-2026-91750-tencent-weknora-ssrf-via-unvalidated-http-redirects"},{"cve":"CVE-2026-84809","cvss":6.5,"epss":0.0057,"slug":"cve-2026-84809-tencent-ai-infra-guard-skill-scan-bytecode-bypass-via-pycache","title":"Tencent AI-Infra-Guard skill-scan bytecode bypass via __pycache__ exclusion","severity":"medium","exploited":false,"published_at":"2026-09-02T17:18:05.15+00:00","url":"https://junglewise.ai/threats/cve-2026-84809-tencent-ai-infra-guard-skill-scan-bytecode-bypass-via-pycache"},{"cve":"CVE-2026-72565","cvss":9.8,"epss":0.0068,"slug":"cve-2026-72565-tencent-apijson-sql-injection-in-having-operator","title":"Tencent APIJSON SQL injection in @having operator","severity":"critical","exploited":false,"published_at":"2026-08-10T11:17:28.973+00:00","url":"https://junglewise.ai/threats/cve-2026-72565-tencent-apijson-sql-injection-in-having-operator"},{"cve":"CVE-2026-50144","cvss":7.1,"slug":"cve-2026-50144-tencent-ncnn-heap-out-of-bounds-write-in-paramdict-load-param","title":"Tencent ncnn heap out-of-bounds write in ParamDict::load_param","severity":"high","exploited":false,"published_at":"2026-07-15T20:17:13.5+00:00","url":"https://junglewise.ai/threats/cve-2026-50144-tencent-ncnn-heap-out-of-bounds-write-in-paramdict-load-param"},{"cve":"CVE-2026-8786","cvss":6.3,"slug":"cve-2026-8786-tencent-weknora-authorization-bypass-in-config-api-endpoint","title":"Tencent WeKnora authorization bypass in Config API Endpoint","severity":"medium","exploited":false,"published_at":"2026-05-18T04:16:34.743+00:00","url":"https://junglewise.ai/threats/cve-2026-8786-tencent-weknora-authorization-bypass-in-config-api-endpoint"},{"cve":"CVE-2026-7221","cvss":7.3,"epss":0.003,"slug":"cve-2026-7221-tencentcloudbase-cloudbase-mcp-ssrf-in-open-url-api-endpoint","title":"TencentCloudBase CloudBase-MCP SSRF in open-url API Endpoint","severity":"high","exploited":false,"published_at":"2026-04-28T04:16:26.88+00:00","url":"https://junglewise.ai/threats/cve-2026-7221-tencentcloudbase-cloudbase-mcp-ssrf-in-open-url-api-endpoint"},{"cve":"CVE-2026-5585","cvss":5.3,"epss":0.0064,"slug":"cve-2026-5585-tencent-ai-infra-guard-information-disclosure-in-task-detail","title":"Tencent AI-Infra-Guard information disclosure in Task Detail Endpoint","severity":"medium","exploited":false,"published_at":"2026-04-05T18:16:17.277+00:00","url":"https://junglewise.ai/threats/cve-2026-5585-tencent-ai-infra-guard-information-disclosure-in-task-detail"}],"vendor":{"hub":true,"name":"Tencent","slug":"tencent","homepage":"https://www.tencent.com/","description":"A multinational technology conglomerate that provides internet-related services and products.","url":"https://junglewise.ai/threats/vendors/tencent"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":1,"exploited":0,"vulnerabilities":3},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-89040","cvss":9.8,"epss":0.0114,"slug":"cve-2026-89040-tencent-msec-path-traversal-to-remote-code-execution","title":"Tencent MSEC path traversal to remote code execution","severity":"critical","exploited":false,"published_at":"2026-09-15T20:19:20.24+00:00","url":"https://junglewise.ai/threats/cve-2026-89040-tencent-msec-path-traversal-to-remote-code-execution"},{"cve":"CVE-2026-72565","cvss":9.8,"epss":0.0068,"slug":"cve-2026-72565-tencent-apijson-sql-injection-in-having-operator","title":"Tencent APIJSON SQL injection in @having operator","severity":"critical","exploited":false,"published_at":"2026-08-10T11:17:28.973+00:00","url":"https://junglewise.ai/threats/cve-2026-72565-tencent-apijson-sql-injection-in-having-operator"},{"cve":"CVE-2026-7221","cvss":7.3,"epss":0.003,"slug":"cve-2026-7221-tencentcloudbase-cloudbase-mcp-ssrf-in-open-url-api-endpoint","title":"TencentCloudBase CloudBase-MCP SSRF in open-url API Endpoint","severity":"high","exploited":false,"published_at":"2026-04-28T04:16:26.88+00:00","url":"https://junglewise.ai/threats/cve-2026-7221-tencentcloudbase-cloudbase-mcp-ssrf-in-open-url-api-endpoint"},{"cve":"CVE-2026-50144","cvss":7.1,"slug":"cve-2026-50144-tencent-ncnn-heap-out-of-bounds-write-in-paramdict-load-param","title":"Tencent ncnn heap out-of-bounds write in ParamDict::load_param","severity":"high","exploited":false,"published_at":"2026-07-15T20:17:13.5+00:00","url":"https://junglewise.ai/threats/cve-2026-50144-tencent-ncnn-heap-out-of-bounds-write-in-paramdict-load-param"},{"cve":"CVE-2026-94111","cvss":6.6,"epss":0.0014,"slug":"cve-2026-94111-tencent-browserskill-through-0-3-0-contains-an-authentication","title":"Tencent BrowserSkill authentication bypass in WebSocket origin validation","severity":"medium","exploited":false,"published_at":"2026-09-20T12:17:06.787+00:00","url":"https://junglewise.ai/threats/cve-2026-94111-tencent-browserskill-through-0-3-0-contains-an-authentication"},{"cve":"CVE-2026-84809","cvss":6.5,"epss":0.0057,"slug":"cve-2026-84809-tencent-ai-infra-guard-skill-scan-bytecode-bypass-via-pycache","title":"Tencent AI-Infra-Guard skill-scan bytecode bypass via __pycache__ exclusion","severity":"medium","exploited":false,"published_at":"2026-09-02T17:18:05.15+00:00","url":"https://junglewise.ai/threats/cve-2026-84809-tencent-ai-infra-guard-skill-scan-bytecode-bypass-via-pycache"},{"cve":"CVE-2026-91750","cvss":6.5,"epss":0.0044,"slug":"cve-2026-91750-tencent-weknora-ssrf-via-unvalidated-http-redirects","title":"Tencent WeKnora SSRF via unvalidated HTTP redirects","severity":"medium","exploited":false,"published_at":"2026-09-15T01:16:54.63+00:00","url":"https://junglewise.ai/threats/cve-2026-91750-tencent-weknora-ssrf-via-unvalidated-http-redirects"},{"cve":"CVE-2026-8786","cvss":6.3,"slug":"cve-2026-8786-tencent-weknora-authorization-bypass-in-config-api-endpoint","title":"Tencent WeKnora authorization bypass in Config API Endpoint","severity":"medium","exploited":false,"published_at":"2026-05-18T04:16:34.743+00:00","url":"https://junglewise.ai/threats/cve-2026-8786-tencent-weknora-authorization-bypass-in-config-api-endpoint"},{"cve":"CVE-2026-5585","cvss":5.3,"epss":0.0064,"slug":"cve-2026-5585-tencent-ai-infra-guard-information-disclosure-in-task-detail","title":"Tencent AI-Infra-Guard information disclosure in Task Detail Endpoint","severity":"medium","exploited":false,"published_at":"2026-04-05T18:16:17.277+00:00","url":"https://junglewise.ai/threats/cve-2026-5585-tencent-ai-infra-guard-information-disclosure-in-task-detail"}],"generated_at":"2026-09-26T12:07:00.15149+00:00","technologies":[]}