CVE-2026-120422

Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The application retrieves configuration data over unencrypted HTTP connections, allowing an attacker capable of manipulating network traffic to replace legitimate server responses with malicious configurations. An attacker can exploit this vulnerability to instruct SGTool.exe to download attacker-controlled files to arbitrary locations, including paths used by legitimate application components. This can result in arbitrary code execution when the downloaded files are subsequently executed or loaded by the application.

• https://pinyin.sogou.com/changelog.php
• https://www.welivesecurity.com/en/eset-research/slippynunchucks-hijacks-sogou-input-methods-brand-promotion-mechanism-to-distribute-malware/

Published

Nov 4, 2026

Last Modified

Nov 5, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-12038Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-12039Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowl…5.7
• CVE-2026-12041The Chatra Live Chat + ChatBot + Cart Saver plugin for WordP…4.4
• CVE-2026-120416A security vulnerability has been detected in AndyFactory ne…5.3
• CVE-2026-12042The WP2Social Auto Publish plugin for WordPress is vulnerabl…4.4
• CVE-2026-120421In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 thro…6.1
• CVE-2026-120425Chatify before 1.6.4 contains an authorization bypass vulner…6.5
• CVE-2026-120426OpenCSG CSGHub through v2.6.0-ce contains an authorization b…7.5
• CVE-2026-120427MrDoc through 1.1.1 contains a missing authorization vulnera…4.3
• CVE-2026-120428PandaWiki 3.65.0 through 3.87.5 contains a stored cross-site…6.1
• CVE-2026-120429Camaleon CMS before 2.9.2 contains a missing authorization v…7.1
• CVE-2026-12043Improper handling of HPACK dynamic table size updates in the…8.8