CVE-2026-111866

HIGH 7.3

nemoTyrant manong func.php arr2sql sql injection

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/del_cache/arr2sql of the file func.php. This manipulation causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The reported GitHub issue was closed with the reason "completed". However, it was not possible to determine the PR or commit which could have fixed this issue.

CWE	CWE-89 CWE-74
Vendor	nemotyrant
Product	manong
Published	Oct 17, 2026

Stay Ahead of the Next One

Get instant alerts for nemotyrant manong

Be the first to know when new high vulnerabilities affecting nemotyrant manong are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

nemoTyrant / manong

7c9e5228e133b9267ad3a415833bc9bb53193bb4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/421574 vuldb.com: https://vuldb.com/vuln/421574/cti vuldb.com: https://vuldb.com/cve/CVE-2026-111866 vuldb.com: https://vuldb.com/submit/1005032 gist.github.com: https://gist.github.com/asdfghjkl12345678910111/c0765c971814f0eadc901d3719ee3f45

Credits

🔍 hbynb (VulDB User) VulDB CNA Team