CVE-2026-16200 zevorn rt-claw RPC authorization vulnerability

🔓 VULNERABILITIES & CVEs

• CVE-2026-16200 zevorn rt-claw RPC authorization vulnerability — CVSS 7.3 — zevorn rt-claw RPC claw_tool_invoke authorization
  A vulnerability has been identified in zevorn rt-claw's RPC claw_tool_invoke component that allows unauthorized actions due to improper authorization checks.

• CVE-2026-16199 nextlevelbuilder GoClaw ExecTool.Execute improper authorization — CVSS 6.3
  nextlevelbuilder GoClaw's ExecTool.Execute function suffers from improper authorization, potentially allowing unauthorized command execution.

• CVE-2026-16198 Sipeed PicoClaw First Run Setup authentication bypass — CVSS 5.6
  An authentication bypass vulnerability exists in Sipeed PicoClaw's First Run Setup access_control.go, enabling unauthorized access.

• CVE-2026-16201 zevorn rt-claw http_request information disclosure — CVSS 5.3
  zevorn rt-claw http_request net.c claw_net_post component leaks sensitive information due to an information disclosure vulnerability.

• CVE-2026-16203 SourceCodester Class and Exam Timetabling System CYS.php cross site scripting
  Cross-site scripting vulnerabilities have been found in SourceCodester Class and Exam Timetabling System's CYS.php file.

• CVE-2026-16202 SourceCodester Class and Exam Timetabling System CYS.php cross site scripting
  Additional cross-site scripting issues are present in the same SourceCodester system affecting the CYS.php script.