PT-2026-57047 · Sipeed · Picoclaw

Eric-I · Publicado 2026-07-10 · Atualizado 2026-07-10 · CVE-2026-15320

NVD

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:P

A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. This vulnerability affects the function rt.ReloadConfig of the file pkg/channels/pico/pico.go. Performing a manipulation of the argument message.send results in missing authorization. It is possible to initiate the attack remotely. The exploit is now public and may be used. The reported GitHub issue was closed automatically due to inactivity.

Exploit

Correção

Incorrect Authorization

Missing Authorization

Enumeração de Fraquezas

CWE-863

CWE-862

Identificadores relacionados

CVE-2026-15320

Produtos afetados

Picoclaw

Referências · 7

• 🔥 https://github.com/sipeed/picoclaw/issues/3071 · Exploit
• https://vuldb.com/vuln/377260 · Nota
• https://github.com/sipeed/picoclaw · Nota
• https://vuldb.com/submit/852942 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15320 · Nota de Segurança
• https://vuldb.com/cve/CVE-2026-15320 · Nota
• https://vuldb.com/vuln/377260/cti · Nota