Live › vulnerability › CVE-2026-111866
Go to dashboardnemoTyrant manong has an SQL injection flaw in the cache/del_cache/arr2sql function of func.php, reachable remotely. An attacker can inject SQL into database queries, which can expose or alter stored data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running nemoTyrant manong up to commit 7c9e5228e133b9267ad3a415833bc9bb53193bb4 are affected. The sources do not say which deployment setups make the flaw reachable, and the project uses rolling releases with no fixed version identified.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/del_cache/arr2sql of the file func.php. This manipulation causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The reported GitHub issue was closed with the reason "completed". However, it was not possible to determine the PR or commit which could have fixed this issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-111866")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.