LIBRID/LIBREF vulnerabilities
3 known CVE vulnerabilities in LIBRID/LIBREF, translated and rated.
- CVE-2026-6285High
A weak password recovery mechanism vulnerability exists in Ankaref Innovation and Technology Inc. LIBRID/LIBREF, allowing password recovery exploitation. The issue affects versions from 2.01.0.2183 through 10092026.
- CVE-2026-12683Medium
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF from 2.01.0.2183 through 10092026. The vendor was contacted early about this disclosure but did not respond in any way.
- CVE-2026-12682Medium
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. The vendor was contacted early about this disclosure but did not respond in any way.