Ghostwire

CVE-2026-16197: A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. The affected element is the function...

MEDIUM CVSS 6.3 Exploit Available 1 PoC

Published: July 18, 2026 | Last Modified: July 18, 2026

Description

A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. The affected element is the function handleMessageReceive of the file pkg/channels/feishu/feishu_64.go of the component Group Message Handler. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The reported GitHub issue was closed automatically due to inactivity.

Ghostwire Analysis — What This Means Practically

Medium CVSS score indicates moderate risk — exploitation requires specific conditions or results in limited impact.
1 proof-of-concept exploit available on GitHub. Public exploit code lowers the barrier for both researchers and attackers.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Proof-of-Concept Exploits (1)

sipeed/picoclaw

CVE-2026-16197: A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. The affected element is the function...

Description

Ghostwire Analysis — What This Means Practically

Proof-of-Concept Exploits (1)

Security Coverage (1 articles)

References