CVE-2026-12199

A vulnerability in `nltk.app.wordnet_app` up to version 3.9.3 allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when started in its default mode. The server listens on all interfaces and processes a specific unauthenticated GET request (`/SHUTDOWN%20THE%20SERVER`) to terminate the process immediately via `os._exit(0)`. This results in a denial of service, impacting service availability. The issue arises due to insufficient authentication and protection mechanisms for critical server functions.

• CWE-306

• https://huntr.com/bounties/cee4ca6a-d17f-4746-abad-c68119633d37
• https://huntr.com/bounties/cee4ca6a-d17f-4746-abad-c68119633d37

Published

Jun 17, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-12193A vulnerability was identified in VS Revo RevoUninstaller 2.…7.8
• CVE-2026-12194PHPIPAM is affected by an authenticated local file inclusion…2.3
• CVE-2026-12195myVesta is affected by an authenticated remote code executio…8.5
• CVE-2026-12196HestiaCP panel cronjob feature is affected by a broken acces…8.3
• CVE-2026-12197A security flaw has been discovered in Ruijie EG105G-P 2.340…7.3
• CVE-2026-12198A weakness has been identified in Microweber up to 2.0.20. T…7.3
• CVE-2026-1220Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a…7.5
• CVE-2026-12200A security vulnerability has been detected in Ritlabs TinyWe…7.3
• CVE-2026-12201A flaw has been found in IObit Malware Fighter up to 13.2.0.…5.3
• CVE-2026-12202A vulnerability has been found in Intelliants Subrion CMS up…2.4
• CVE-2026-12203A vulnerability was found in HKUDS AI-Trader up to 74caf996f…5.5
• CVE-2026-12204A vulnerability was determined in ShopXO up to 6.7.1. This v…7.3