Advisories · Technology

kerwincui FastBee.

Every CVE that names kerwincui FastBee among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111654 CVE record

CVSS 5.3 Medium

FastBee through 2.1.0 IDOR via /iot/group By-ID Endpoints
- kerwincui FastBee
- Broken access control
Not analysed yet 16 Oct 2026
CVE-2026-110124 CVE record

CVSS 8.6 High

FastBee through 2.1.0 IDOR via DeviceController /iot/device Endpoints
- kerwincui FastBee
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-7677 CVE record

CVSS 5.1 Medium

kerwincui FastBee System Notice SysNoticeController.java add cross site scripting
- kerwincui FastBee
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 3 May 2026
CVE-2026-7676 CVE record

CVSS 5.3 Medium

kerwincui FastBee Tool Download Endpoint ToolController.java ToolController.download path traversal
- kerwincui FastBee
- Path traversal
Not analysed yet 3 May 2026