CVE Intelligence

MGdaasLab WHartTest vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting MGdaasLab WHartTest: 1 record(s), with affected versions and fixes.

CVE-2026-111617 Medium · 6.5 CWE-306 Oct 16, 2026
WHartTest through 2.8.1 Missing Authentication on UI-Automation WebSocket Endpoints
WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id to intercept other users' test-case payloads, receive broadcast step results, and spoof results and screen frames into victim sessions.