HIGH

CVE-2026-18770

2026-08-04 CVSS v3.1

CVSS

7.3

Description

A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Validation Handler. The manipulation leads to code injection. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness (CWE)

CWE-74 Injection

CWE-94 Code Injection

EPSS Score

0.3%

Probability of exploitation in next 30 days

23.4th percentile

References

https://asciinema.org/a/1230301 https://vuldb.com/cve/CVE-2026-18770 https://vuldb.com/submit/856224 https://vuldb.com/vuln/385776 https://vuldb.com/vuln/385776/cti

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE