CVE-2023-35134: Weintek Weincloud

Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Weintek Weincloud v0.13.6 could allow an attacker to reset a password with the corresponding account’s JWT token only.

Affected products

• Weintek Weincloud: version 0.13.6 only

Published 2023-07-19. Last modified 2026-06-17.