Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2026-10843 CVE-2026-12682 · GHSA-564v-2c3p-78hw

Stored XSS in Ankaref's LIBRID/LIBREF

Priority LOW 24

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00226 Published 2026-09-10 Fixed in 18.9.26.2319 CWE-79
Priority LOW 39

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ankaref Innovation and Technology Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00394 Published 2026-09-10 Fixed in 18.9.26.2319 CWE-640
Priority LOW 24

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00226 Published 2026-09-10 Fixed in 18.9.26.2319 CWE-79