{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/nemotyrant/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:nemotyrant:manong:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-111866"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["manong (\u003c= 7c9e5228e133b9267ad3a415833bc9bb53193bb4)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["nemoTyrant"],"content_html":"\u003cp\u003eA SQL injection vulnerability (CVE-2026-111866) has been identified in the nemoTyrant manong software, affecting versions up to commit 7c9e5228e133b9267ad3a415833bc9bb53193bb4. The vulnerability resides within the 'cache/del_cache/arr2sql' function located in 'func.php'. Remote, unauthenticated attackers can leverage this flaw to manipulate SQL queries by injecting malicious payloads into parameters processed by the vulnerable function. This can lead to unauthorized data exfiltration, modification, or complete compromise of the underlying database. As the project follows a rolling release model without explicit versioning or clear remediation commit tracking, users must monitor the official repository for updates and patches.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability allows an attacker to execute arbitrary SQL commands against the database backend. Depending on the database permissions configured for the application, this could result in full database compromise, unauthorized access to sensitive application data, or potential denial of service. The scope of impact is limited to environments running the affected versions of the manong software.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritized, concrete actions for detection engineering and security teams:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImplement web application firewall (WAF) rules to detect and block common SQL injection patterns targeting the 'func.php' script.\u003c/li\u003e\n\u003cli\u003eAudit the webserver logs for unusual HTTP request parameters containing SQL metacharacters (e.g., single quotes, double dashes, OR 1=1) directed at the 'cache/del_cache/arr2sql' endpoint.\u003c/li\u003e\n\u003cli\u003eReview the nemoTyrant manong repository regularly for security patches or maintenance commits, as the project does not provide traditional version-based security updates.\u003c/li\u003e\n\u003cli\u003eEnsure the database user account utilized by the manong application follows the principle of least privilege to minimize the impact of a potential SQL injection compromise.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-18T02:09:24Z","date_published":"2026-10-18T02:09:24Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-111866/","summary":"An unauthenticated remote SQL injection vulnerability in the nemoTyrant manong 'arr2sql' function allows attackers to execute arbitrary database commands.","title":"SQL Injection Vulnerability in nemoTyrant manong","url":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-111866/"}],"language":"en","title":"CraftedSignal Threat Feed - NemoTyrant","version":"https://jsonfeed.org/version/1.1"}