Iflytek
9 CVEs tracked since 2026. Since Oct 2026, none of them reached CISA KEV.
Iflytek CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-10 | 9 | 0 |
Products
The products that kept showing up in Iflytek's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 14 most recently published vulnerabilities affecting Iflytek.
- CVE-2026-116340iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization4.3
- CVE-2026-116339iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist7.3
- CVE-2026-110764AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download5.3
- CVE-2026-110211SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpoint8.1
- CVE-2026-108864iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint4.2
- CVE-2026-108550SkillHub before 0.2.22 Account Takeover via Account Merge Flow8.8
- CVE-2026-108547AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch-shared-var6.5
- CVE-2026-108548AstronRPA through 1.1.6 Authentication Bypass via Arbitrary Bearer Token7.3
- CVE-2026-108263Astron Agent: Unsandboxed code-node leads to cross-tenant RCE9.9
- CVE-2026-108160AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed7.5
- CVE-2026-108159AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge7.5
- CVE-2026-95930iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery6.3
- CVE-2026-95929iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection6.3
- CVE-2026-82475iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check8.1
The record
- Peak rank
- #183 in Oct 2026
- Busiest month shown
- Oct 2026, 9 CVEs
- Months with a KEV entry
- 0 since Oct 2026
- Monthly snapshots
- 1 since 2026