CVE-2026-16083

EUVD-2026-45359
A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This affects the function webhook.ParseRequest of the file pkg/channels/line/line.go of the component LINE Webhook. The manipulation results in authentication bypass by capture-replay. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed automatically with the label "not planned" by a bot.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
sipeedpicoclaw
0.2.0
CNA
sipeedpicoclaw
0.2.1
CNA
sipeedpicoclaw
0.2.2
CNA
sipeedpicoclaw
0.2.3
CNA
sipeedpicoclaw
0.2.4
CNA
sipeedpicoclaw
0.2.5
CNA
sipeedpicoclaw
0.2.6
CNA
sipeedpicoclaw
0.2.7
CNA
sipeedpicoclaw
0.2.8
CNA
sipeedpicoclaw
0.2.9
CNA
Common Weakness Enumeration
References
https://github.com/sipeed/picoclaw/
https://github.com/sipeed/picoclaw/issues/3073
https://vuldb.com/cve/CVE-2026-16083
https://vuldb.com/submit/852945
https://vuldb.com/vuln/379795
https://vuldb.com/vuln/379795/cti