CVE-2026-76760

HIGH 7.3

chenhg5 cc-connect webhook.go authenticate code injection

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected by this vulnerability is the function Authenticate of the file core/webhook.go. The manipulation of the argument exec results in code injection. The attack may be performed from remote. The exploit has been made public and could be used. The reported GitHub issue was closed automatically due to inactivity.

CWE	CWE-94 CWE-74
Vendor	chenhg5
Product	cc-connect
Published	Aug 19, 2026

Stay Ahead of the Next One

Get instant alerts for chenhg5 cc-connect

Be the first to know when new high vulnerabilities affecting chenhg5 cc-connect are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

chenhg5 / cc-connect

1.4.0 1.4.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/393229 vuldb.com: https://vuldb.com/vuln/393229/cti vuldb.com: https://vuldb.com/cve/CVE-2026-76760 vuldb.com: https://vuldb.com/submit/878916 github.com: https://github.com/chenhg5/cc-connect/issues/1488 github.com: https://github.com/chenhg5/cc-connect/

Credits

🔍 summmm (VulDB User) VulDB CNA Team