Threats Tagged 'cve-2026-103918'
View all threats tagged with 'cve-2026-103918'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-103918'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-103918 is a vulnerability in the orpc tool of middleapi prior to version 1.14.10. It involves improper control of dynamically-determined object attributes in the ZodSmartCoercionPlugin and experimental_ZodSmartCoercionPlugin, allowing a remote client to supply a __proto__ property that can replace the prototype of the returned request object. This can cause attacker-controlled inherited values to affect application lookups or trigger unhandled TypeErrors during validation. The issue does not modify global or unrelated objects and only affects crafted requests. The vulnerability is fixed in version 1.14.10. Join the discussion | CVE Database V5 | 10/02/2026, 20:02:50 UTC Added: 10/02/2026, 20:16:41 UTC |
Showing 1 to 1 of 1 result