Threat Intelligence Database

CVE-2026-0616 is a high-severity vulnerability in TheLibrarian.io's web_fetch tool that allows unauthorized users to retrieve the Adminer interface content. This exposure enables attackers to access the internal backend system without authentication, compromising sensitive system information. The vulnerability does not require user interaction or privileges and can be exploited remotely over the network. Although no known exploits are currently in the wild, the flaw poses a significant confidentiality risk. The vendor has released patches addressing this issue in all affected versions. European organizations using TheLibrarian.io should prioritize patching to prevent unauthorized backend access. Countries with higher adoption of TheLibrarian.io or critical infrastructure relying on it are at greater risk.

HighVulnerabilityGermanyFranceNetherlands+4#cve#cve-2026-0616#cwe-497

CVE-2026-0613 is a high-severity vulnerability in TheLibrarian.io that allows unauthorized internal port scanning via SSRF-like behavior through its web_fetch tool. This flaw exposes sensitive system information by enabling attackers to perform GET requests to internal IP addresses and services within the Hetzner cloud environment used by TheLibrarian. The vulnerability does not require authentication or user interaction and can be exploited remotely over the network. Although no known exploits are currently in the wild, the vendor has released patches for all affected versions. European organizations using TheLibrarian.io, especially those hosted on Hetzner infrastructure, are at risk of internal network reconnaissance that could facilitate further attacks. Mitigation involves promptly applying vendor patches, restricting internal service exposure, and monitoring for unusual internal request patterns. Countries with significant Hetzner data center presence and TheLibrarian adoption, such as Germany and the Netherlands, are most likely to be affected.

HighVulnerabilityGermanyNetherlandsFrance+2#cve#cve-2026-0613#cwe-497

CVE-2026-0612 is a high-severity information leakage vulnerability in TheLibrarian.io's web_fetch tool that allows attackers to retrieve arbitrary external content via the platform, effectively proxying requests through TheLibrarian infrastructure. This flaw exposes sensitive system information to unauthorized parties without requiring authentication or user interaction. The vulnerability impacts confidentiality but does not affect integrity or availability. Although no known exploits are reported in the wild, the ease of exploitation and network accessibility make it a significant risk. The vendor has released patches for all versions, and organizations using TheLibrarian.io should apply updates immediately. European organizations relying on TheLibrarian.io for content retrieval or proxying services are at risk of data exposure and potential indirect attacks. Countries with higher adoption of TheLibrarian.

HighVulnerabilityGermanyFranceNetherlands+4#cve#cve-2026-0612#cwe-497