CVE-2026-121261
Medium · 4.3CVSS
4.3
EPSS
0.3%
Published
Nov 3, 2026
CISA due date
—
The record
A vulnerability has been found in phpMyAdmin ShapeFile up to 4.0.1. Impacted is the function ShapeRecord::loadFromFile of the component SHP File Handler. Such manipulation leads to infinite loop. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-120237 A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. CWE-404
- CVE-2026-120234 A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. CWE-404
- CVE-2026-120235 A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. CWE-404
- CVE-2026-118276 A vulnerability was determined in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118275 A vulnerability was found in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118274 A vulnerability has been found in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118273 A flaw has been found in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118271 A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. CWE-404