ech0 records

3 published records for vendor ech0.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2026-35036No exploit	Ech0 Affected by Unauthenticated Server-Side Request Forgery in Website Preview Featureech0 · ech0 · CWE-918 Pre-auth SSRF	High7.5	—	0.4%	Apr 6, 2026
28Monitor	CVE-2026-35037Proof of concept	Ech0 affected by unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadataech0 · ech0 · CWE-918 Pre-auth SSRF	High7.2	—	0.7%	Apr 6, 2026
21Monitor	CVE-2026-33638No exploit	Ech0 authenticated user-list exposed data via public `/api/allusers` endpointech0 · ech0 · CWE-862 Pre-auth Auth bypass Broken access control (IDOR)	Medium5.3	—	0.6%	Mar 26, 2026

CVE-2026-35036
30Monitor
Ech0 Affected by Unauthenticated Server-Side Request Forgery in Website Preview Feature
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SSRF
ech0 · ech0Apr 6, 2026
CVE-2026-35037
28Monitor
Ech0 affected by unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadata
HighCVSS 7.2Proof of conceptEPSS 1%
- Pre-auth
- SSRF
ech0 · ech0Apr 6, 2026
CVE-2026-33638
21Monitor
Ech0 authenticated user-list exposed data via public `/api/allusers` endpoint
MediumCVSS 5.3No exploitEPSS 1%
ech0 · ech0Mar 26, 2026