CVE-2026-112105

A vulnerability has been found in GlitterWare Passy up to 1.10.1. The affected element is the function MyHttpOverrides in the library lib/main.dart of the component TLS Handler. Such manipulation leads to improper certificate validation. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is described as difficult. Upgrading to version 1.10.2 is sufficient to fix this issue. The name of the patch is 3d48df7cce05e39fa4de1e42768492307f26882e. The affected component should be upgraded.

• CWE-287
• CWE-295

• https://github.com/GlitterWare/Passy/
• https://github.com/GlitterWare/Passy/commit/3d48df7cce05e39fa4de1e42768492307f26882e
• https://github.com/GlitterWare/Passy/issues/210
• https://github.com/GlitterWare/Passy/releases/tag/v1.10.2
• https://vuldb.com/cve/CVE-2026-112105
• https://vuldb.com/submit/1013135
• https://vuldb.com/vuln/422055
• https://vuldb.com/vuln/422055/cti

Published

Oct 19, 2026

Last Modified

Oct 19, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11210Inappropriate implementation in Safe Browsing in Google Chro…6.5
• CVE-2026-112100A vulnerability was determined in DeepPavlov up to 1.7.0. Th…5.5
• CVE-2026-112101A vulnerability was determined in BlackBeltTechnology pi-age…4.3
• CVE-2026-112102A vulnerability was detected in AXA Group NLP.js 4.27.0. Thi…6.3
• CVE-2026-112103A vulnerability has been found in f3-factory fatfree-core up…3.7
• CVE-2026-112104A flaw has been found in eremef bandcamp-player up to 1.8.33…7.3
• CVE-2026-112106A security vulnerability has been detected in TufayelLUS Tik…3.7
• CVE-2026-112107A flaw has been found in ztxz16 fastllm up to 1.8.2. Affecte…6.3
• CVE-2026-112108A vulnerability was determined in ztxz16 fastllm up to 0.1.8…6.3
• CVE-2026-11211Integer overflow in V8 in Google Chrome prior to 149.0.7827.…8.8
• CVE-2026-112111The Bootstrap Shortcodes plugin for WordPress before 3.4.6 i…5.1
• CVE-2026-112112An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Intern…2.3