Didi vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Didi products: 1 record(s), with severity, exploitation and fixes.

KnowStreaming 1

Exploited only (KEV) →

CVE-2026-92780 High · 8.8 CWE-862 Sep 16, 2026

KnowStreaming through 3.4.1 Missing Authorization on the REST API

KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality. Attackers can call identity-management endpoints to create administrator accounts or grant themselves administrative privileges without proper authorization.