CVE-2026-103036 | middleapi orpc up to 1.14.8 SmartCoercionPlugin prototype pollution

October 2, 2026 Yanac

A vulnerability identified as critical has been detected in middleapi orpc up to 1.14.8. This issue affects some unknown processing of the component SmartCoercionPlugin. The manipulation leads to improperly controlled modification of object prototype attributes.

This vulnerability is traded as CVE-2026-103036. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More