PT-2026-114783

CERT/CC disclosed three DataElement Bisheng vulnerabilities CVE-2026-96679, CVE-2026-96681, CVE-2026-100156 allowing unauthenticated admin takeover. Bisheng CVE202696679 CVE202696681 CVE2026100156 CERTCC LLMSecurity Cybersecurity https://t.co/ZrY7qNDOvz...

PT-2026-114780

CERT/CC disclosed three DataElement Bisheng vulnerabilities CVE-2026-96679, CVE-2026-96681, CVE-2026-100156 allowing unauthenticated admin takeover. Bisheng CVE202696679 CVE202696681 CVE2026100156 CERTCC LLMSecurity Cybersecurity https://t.co/ZrY7qNDOvz...

Bisheng has authentication bypass vulnerabilities

Overview Bisheng contains three vulnerabilities: a pre-authentication account takeover mechanism via a legacy single sign-on SSO endpoint; an Insecure Direct Object Reference IDOR vulnerability that exposes cross-user workflow data; and prior to version 2.5.0, authenticated attackers could perfor...