CVE-2026-120503

    Dashboard / Vulnerabilities / CVE-2026-120503

    CVE-2026-120503

    Published: 2 Nov 2026Last Modified: 4 Nov 2026

    Summary: EchoHS GeekezBrowser Public API status information disclosure

    Details: A vulnerability was detected in EchoHS GeekezBrowser up to 1.7.2/1.8.0. This affects an unknown part of the file /api/status of the component Public API. The manipulation results in information disclosure. The attack requires a local approach. The exploit is now public and may be used. Upgrading to version 1.8.1 is able to mitigate this issue. The patch is identified as 9317a89aa0fd2715d9c2bd27bdbb52b5d228dd9e. Upgrading the affected component is recommended.

    References: https://github.com/EchoHS/GeekezBrowser/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/120xxx/CVE-2026-120503.json, https://nvd.nist.gov/vuln/detail/CVE-2026-120503, https://vuldb.com/cve/CVE-2026-120503, https://vuldb.com/submit/1027894, https://vuldb.com/vuln/429883, https://github.com/EchoHS/GeekezBrowser/issues/60, https://vuldb.com/vuln/429883/cti, https://github.com/EchoHS/GeekezBrowser/commit/9317a89aa0fd2715d9c2bd27bdbb52b5d228dd9e, https://github.com/EchoHS/GeekezBrowser/releases/tag/v1.8.1

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 626026d267a4b6bd6aa9cdf2ee2caf6e818d1c0d
    Fixed -9317a89aa0fd2715d9c2bd27bdbb52b5d228dd9e

    Affected versions

    1.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-120503 | CVE-DB