CVE-2026-45272

creationtimestamp| type| source ---|---|--- 2026-08-19 16:10:32+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mth4mcolbq2m 2026-08-19 18:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthexnxafq2t 2026-08-20 04:10:04+00:00| seen|...

CVE-2026-45272

MyBooks (also known as Talebook), a personal ebook management web server, is vulnerable to remote code execution in versions 3.41.2 and earlier . The root cause is a Python code injection via the AdminSettings.post handler in webserver/handlers/admin.py, which accepts SOCIAL_AUTH key names withou...