Known Vulnerabilities for Chatbot by CBOT
Listed below are 10 of the newest known vulnerabilities associated with "Chatbot" by "CBOT".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57362 json | Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versions. | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-49213 json | TypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot's shared SSRF validator in packages/lib/src/ssrf/validateHttpReqU... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-49082 json | Subscriber Sensitive Data Exposure in Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Ser... | Not Provided | 2026-06-15 | 2026-06-15 |
| CVE-2026-48768 json | TypeBot is a chatbot builder tool. In versions 3.16.1 and earlier, POST /api/blocks/file-input/v3/generate-upload-url is unau... | Not Provided | 2026-06-18 | 2026-06-18 |
| CVE-2026-48764 json | TypeBot is a chatbot builder tool. In versions prior to 3.17.2, SSRF validation is implemented by resolving a hostname once a... | Not Provided | 2026-06-18 | 2026-06-18 |
| CVE-2026-48759 json | TypeBot is a chatbot builder tool. Versions 3.15.2 and below have an Insecure Direct Object Reference vulnerability through c... | Not Provided | 2026-06-17 | 2026-06-18 |
| CVE-2026-40788 json | Subscriber Broken Access Control in ChatBot <= 7.9.7 versions. | Not Provided | 2026-06-15 | 2026-06-15 |
| CVE-2026-39968 json | TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the fix for GHSA-4xc5-wfwc-jw47 ("Credential Theft via Clien... | Not Provided | 2026-05-22 | 2026-05-26 |
| CVE-2026-39967 json | TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the bot engine's the findResult query does not filter result... | Not Provided | 2026-05-22 | 2026-05-26 |
| CVE-2026-39425 json | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vul... | Not Provided | 2026-04-14 | 2026-04-14 |