Findings

CVE-2026-108682

A weakness has been identified in zhayujie CowAgent up to 2.1.6.

Published Oct 11, 2026 · updated Oct 14, 2026

A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 11, 2026 · NIST NVD

    Detected

    A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respo

  2. Oct 14, 2026 · NIST NVD

    Updated

    A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respo

Sources

  • CVE.orgCVE-2026-108682

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-108682

    30-day exploitation probability 0.4%

    first.org
  • NIST NVDCVE-2026-108682

    A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made avail

    nvd.nist.gov

References