CVE ID :CVE-2026-112309 Published : Oct. 19, 2026, 4:17 p.m. | 1 hour, 48 minutes ago Description :@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-112309 - @rvf/set-get before 7.0.4 Prototype Pollution via setPath Inherited Methods

VERWANDTEARTIKEL

Critical Drupal RCE Vulnerability Could Let Attackers Take Over Websites Without Authentication

CVE-2026-105810 - Authenticated Local Stack Overflow in TP-Link Tapo C320WS

CVE-2026-12665 - IBM MQ Buffer Overflow

CVE-2026-111862 - Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code

CVE-2026-111064 - aiohttp server lacks an initial request/header timeout

CVE-2026-111066 - AIOHTTP: File descriptor exhaustion in multipart requests