SQL Injection Vulnerability in nemoTyrant Manong by nemoTyrant
CVE-2026-111866

6.9MEDIUM

Key Information:

Vendor

Nemotyrant

Status
Manong
Vendor
CVE Published:
17 October 2026

What is CVE-2026-111866?

A weakness in the nemoTyrant Manong application has been identified, affecting the function cache/del_cache/arr2sql in the func.php file. This vulnerability allows an attacker to perform SQL injection, which can be exploited remotely. The issue was reported on GitHub and marked as completed, but the specific commit or pull request that addressed the vulnerability is not documented. Users should ensure they are using the latest version to mitigate risks associated with this issue.

Affected Version(s)

manong 7c9e5228e133b9267ad3a415833bc9bb53193bb4

References

https://vuldb.com/vuln/421574
vdb-entrytechnical-description
https://vuldb.com/vuln/421574/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-111866
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

hbynb (VulDB User)
VulDB CNA Team
.