https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-19T08:43:38.306364+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111612 CVE-2026-111612 — netdisk-fast-download through 0.4.8 Credential Disclosure via /v2/randomAuth 2026-10-19T08:43:38.307685+00:00

Affected: qaiu netdisk-fast-download

netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi. Attackers can repeatedly call the endpoint and decrypt the encryptedAuth blob using the hard-coded AES key nfd_auth_key2026 to recover other users' cloud-drive cookies, tokens, or passwords.