CVE-2026-109526 | HBAI-Ltd Toonflow-app up to 1.1.8 exportData Endpoint information disclosure

October 12, 2026 Yanac

A vulnerability categorized as problematic has been discovered in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure.

This vulnerability is traded as CVE-2026-109526. An attack has to be approached locally. Furthermore, there is an exploit available.

It is advisable to upgrade the affected component.

The vendor explains: “The report targets ToonFlow version 1.1.8. The current release is 2.0.4, which is the result of a substantial architectural refactor; the code paths referenced in the report do not apply to the current version. The report does not describe a vulnerability in any supported release.”VulDB Recent EntriesRead More