CVE-2026-0616

CVE-2026-0616 describes a vulnerability in TheLibrarians web_fetch tool that allows unauthenticated attackers to retrieve the Adminer interface content, subsequently enabling access to the internal TheLibrarian backend system. This vulnerability carries a high CVSS score of 7.5, indicating a network-based attack with low complexity and high confidentiality impact, as sensitive system data can be accessed. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 11 mentions and media coverage, suggesting awareness and potential for future exploitation. The vendor has released fixes for all affected versions.