CVE-2026-120503

A vulnerability was detected in EchoHS GeekezBrowser up to 1.7.2/1.8.0. This affects an unknown part of the file /api/status of the component Public API. The manipulation results in information disclosure. The attack requires a local approach. The exploit is now public and may be used. Upgrading to version 1.8.1 is able to mitigate this issue. The patch is identified as 9317a89aa0fd2715d9c2bd27bdbb52b5d228dd9e. Upgrading the affected component is recommended.

• CWE-200
• CWE-284

• https://github.com/EchoHS/GeekezBrowser/
• https://github.com/EchoHS/GeekezBrowser/commit/9317a89aa0fd2715d9c2bd27bdbb52b5d228dd9e
• https://github.com/EchoHS/GeekezBrowser/issues/60
• https://github.com/EchoHS/GeekezBrowser/releases/tag/v1.8.1
• https://vuldb.com/cve/CVE-2026-120503
• https://vuldb.com/submit/1027894
• https://vuldb.com/vuln/429883
• https://vuldb.com/vuln/429883/cti

Published

Nov 2, 2026

Last Modified

Nov 2, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-120492Chainlit 2.12.0 contains a server-side request forgery vulne…5.4
• CVE-2026-120497Stored cross-site scripting (XSS) in the HTML report generat…5
• CVE-2026-120499h5io before 0.2.6 contains a code injection vulnerability in…7.8
• CVE-2026-12050SQL injection in pgAdmin 4's named restore point endpoint (P…8.8
• CVE-2026-120500An Otter Wiki before 2.26.2 contains a stored cross-site scr…6.1
• CVE-2026-120501An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosur…5.3
• CVE-2026-12051The USB DFU class implementation in Zephyr's new (experiment…4.6
• CVE-2026-120518The BuddyPress XProfile Image Field plugin for WordPress is …9.1
• CVE-2026-12052The USB device-side CDC NCM class control-to-host handler us…5.2
• CVE-2026-120524The News Kit Addons For Elementor plugin for WordPress is vu…6.4
• CVE-2026-12053GitLab has remediated an issue in GitLab EE affecting all ve…7.5
• CVE-2026-120533The Redux Framework plugin for WordPress is vulnerable to St…6.4