CVE-2026-111988 in dyad

Prediction

by VulDB Data Team • 10/17/2026

A security flaw has been discovered in <a href="/product/dyad-sh:dyad">dyad-sh dyad up to 1.16.0</a>. Affected by this issue is some unknown functionality of the component <em>OAuth Callback Handler</em>. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. Upgrading to version 1.17.0-beta.1 can resolve this issue. The patch is named <em>39fbae87b38573616a1a3b152cdb292787bb1109</em>. It is advisable to upgrade the affected component.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-421654
• CPE: VulDB
• CWE: CWE-352 (confirmed)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-111988
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-111988
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-111988/