CVE-2026-111699 | Niefy wx-api up to 0.8.2 Fan Controller /wxUser/getUserInfo openid improper authentication

October 16, 2026 Yanac

A vulnerability categorized as critical has been discovered in Niefy wx-api up to 0.8.2. The impacted element is an unknown function of the file /wxUser/getUserInfo of the component Fan Controller. Executing a manipulation of the argument openid can lead to improper authentication. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is registered as CVE-2026-111699. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More