Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in bufanyun HotGo up to 2.0. This issue affects the function ImageTransferStorage of the file /server/internal/logic/common/upload.go of the component Endpoint. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-3683 A vulnerability was detected in bufanyun HotGo up to 2.0. This issue affects the function ImageTransferStorage of the file /server/internal/logic/common/upload.go of th… https://www.cve.org/CVERecord?id=CVE-2026-3683
Post summary
The text announces the detection of CVE‑2026‑3683 in bufanyun HotGo up to v2.0, identifying the vulnerable function and file.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3683 - bufanyun HotGo Endpoint upload.go ImageTransferStorage server-side request forgery Intel Report: https://ift.tt/ZgplLa6
Post summary
A brief threat alert announces CVE‑2026‑3683, a server‑side request forgery in the HotGo upload endpoint, but provides no exploit, patch, or active attack details.