VULNERABILITY INTELLIGENCE

CVE-2026-27933

CVSS score6.8 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2026-02-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Description

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue.

Weakness classification

  • security-advisories@github.com: CWE-613

Primary references