PT-2026-60994
CVE-2026-16195
·
Published
2026-07-18
·
Updated
2026-07-20
Description by
CVSS 2.0
6.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Sipeed PicoClaw versions prior to 0.3.0
Description
A security flaw in the Group Message Handler component allows for incorrect authorization. The issue resides in the
dispatchIncoming() function within the pkg/channels/wecom/wecom.go file and can be exploited remotely.Recommendations
Update to a version newer than 0.2.9.
As a temporary mitigation, restrict access to the
dispatchIncoming() function.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾