TEN-framework vulnerabilities

Products

• ten-framework 1

Latest TEN-framework CVEs

Newest publication first

1. CVE-2026-85688 TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer

   Published 2026-09-04

   Critical·CVSS 9.3 EPSS 2.6%

   TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints. Attackers can submit POST and PUT requests to the /api/designer/v1/file-content endpoints to read arbitrary files or write malicious conte...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.