CVE-2026-10042 documents a critical remote code execution vulnerability in manga-image-translator, an open-source tool for translating text in manga images. The vulnerability exists in the shared API server mode, specifically within the share.py module, where two HTTP endpoints—/execute/{method_name} and /simple_execute/{method_name}—unsafely deserialize attacker-controlled request bodies using Python's p [truncated]
The CVE record for CVE-2026-26215 was published on 2026-02-11T23:16:10.797Z and has not been modified since then. The NVD entry is currently Deferred. The vulnerability affects manga-image-translator version beta-0.3 and prior in shared API mode, allowing unauthenticated remote code execution due to an unsafe deserialization issue. The FastAPI endpoints /simple_execute/{method} and /execute/{method} are v [truncated]
