<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: cbot panel</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-2887: Authentication Bypass by Spoofing vulnerability in CBOT Chatbot allows Authentication Bypass.

This issue affe</title><link>https://patchthecve.com/cve/CVE-2023-2887.html</link><guid>https://patchthecve.com/cve/CVE-2023-2887.html</guid><pubDate>Wed, 17 Jun 2026 05:53:42 +0000</pubDate><description>CRITICAL 9.8: Authentication Bypass by Spoofing vulnerability in CBOT Chatbot allows Authentication Bypass.

This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.</description></item><item><title>CVE-2023-2886: Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application </title><link>https://patchthecve.com/cve/CVE-2023-2886.html</link><guid>https://patchthecve.com/cve/CVE-2023-2886.html</guid><pubDate>Wed, 17 Jun 2026 05:53:42 +0000</pubDate><description>MEDIUM 4.3: Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application API Manipulation.

This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.</description></item><item><title>CVE-2023-2885: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT</title><link>https://patchthecve.com/cve/CVE-2023-2885.html</link><guid>https://patchthecve.com/cve/CVE-2023-2885.html</guid><pubDate>Wed, 17 Jun 2026 05:53:42 +0000</pubDate><description>HIGH 8.1: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM).

This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.</description></item><item><title>CVE-2023-2884: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulne</title><link>https://patchthecve.com/cve/CVE-2023-2884.html</link><guid>https://patchthecve.com/cve/CVE-2023-2884.html</guid><pubDate>Wed, 17 Jun 2026 05:53:42 +0000</pubDate><description>CRITICAL 9.8: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation.

This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.</description></item><item><title>CVE-2023-2883: Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Au</title><link>https://patchthecve.com/cve/CVE-2023-2883.html</link><guid>https://patchthecve.com/cve/CVE-2023-2883.html</guid><pubDate>Wed, 17 Jun 2026 05:53:41 +0000</pubDate><description>HIGH 8.8: Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass.

This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.</description></item><item><title>CVE-2023-2882: Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Ab</title><link>https://patchthecve.com/cve/CVE-2023-2882.html</link><guid>https://patchthecve.com/cve/CVE-2023-2882.html</guid><pubDate>Wed, 17 Jun 2026 05:53:41 +0000</pubDate><description>CRITICAL 9.8: Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse.

This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.</description></item></channel></rss>