lichoin
8 credited records · 8 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
21Monitor | CVE-2026-111631No exploit | Distributor before 2.3.2 Missing Authorization in External Connection AJAX Actions10up · distributor · CWE-862 | Medium5.3 | — | 0.2% | Oct 16, 2026 |
9Monitor | CVE-2026-111628No exploit | 10up Distributor before 2.3.2 PHP Object Injection via set_meta()10up · distributor · CWE-502 | Low2.3 | — | 0.2% | Oct 16, 2026 |
34Monitor | CVE-2026-111627No exploit | HestiaCP before 1.10.5 Protected Admin Bypass via Cron Job Creationhestiacp · hestiacp · CWE-863 | High8.6 | — | 0.5% | Oct 16, 2026 |
21Monitor | CVE-2026-111625No exploit | 10up Distributor before 2.3.2 Missing Authorization via dt_push AJAX Action10up · distributor · CWE-862 | Medium5.3 | — | 0.2% | Oct 16, 2026 |
25Monitor | CVE-2026-111624No exploit | Umbraco CMS before 17.7.1 and 18.2.1 Missing Authorization on SignalR Hubsumbraco · umbraco-cms · CWE-306 | Medium6.3 | — | 0.3% | Oct 16, 2026 |
21Monitor | CVE-2026-100697No exploit | Adminer 6.0.0 Server-Side Request Forgery via ClickHouse drivervrana · adminer · CWE-918 | Medium5.3 | — | 0.4% | Sep 26, 2026 |
27Monitor | CVE-2026-100696No exploit | Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Drivervrana · adminer · CWE-918 | Medium6.9 | — | 0.3% | Sep 26, 2026 |
28Monitor | CVE-2026-87976No exploit | Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundlesapache · nifi · CWE-22 | High7.2 | — | 0.7% | Sep 16, 2026 |
- CVE-2026-11163121Monitor
Distributor before 2.3.2 Missing Authorization in External Connection AJAX Actions
MediumCVSS 5.3No exploitEPSS 0%10up · distributorOct 16, 2026
- CVE-2026-1116289Monitor
10up Distributor before 2.3.2 PHP Object Injection via set_meta()
LowCVSS 2.3No exploitEPSS 0%10up · distributorOct 16, 2026
- CVE-2026-11162734Monitor
HestiaCP before 1.10.5 Protected Admin Bypass via Cron Job Creation
HighCVSS 8.6No exploitEPSS 0%hestiacp · hestiacpOct 16, 2026
- CVE-2026-11162521Monitor
10up Distributor before 2.3.2 Missing Authorization via dt_push AJAX Action
MediumCVSS 5.3No exploitEPSS 0%10up · distributorOct 16, 2026
- CVE-2026-11162425Monitor
Umbraco CMS before 17.7.1 and 18.2.1 Missing Authorization on SignalR Hubs
MediumCVSS 6.3No exploitEPSS 0%umbraco · umbraco-cmsOct 16, 2026
- CVE-2026-10069721Monitor
Adminer 6.0.0 Server-Side Request Forgery via ClickHouse driver
MediumCVSS 5.3No exploitEPSS 0%vrana · adminerSep 26, 2026
- CVE-2026-10069627Monitor
Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driver
MediumCVSS 6.9No exploitEPSS 0%vrana · adminerSep 26, 2026
- CVE-2026-8797628Monitor
Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles
HighCVSS 7.2No exploitEPSS 0%apache · nifiSep 16, 2026