SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-15607

MEDIUM · CVSS 4.3 EPSS 0.25% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

The vulnerability affects the Alias Path Handler in the tanstack db library, specifically in the select function, allowing for improper modification of object prototype attributes. This could lead to remote exploitation, potentially compromising application integrity. Organizations using affected versions of tanstack db should prioritize applying the patch identified as ac09b1177a100eafa85cba3cd09dd1f53f933ded to mitigate risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-15607
Severity
MEDIUM
CVSS
4.3
EPSS
0.25%
F5

Original NVD Description

A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the file src/query/compiler/select.ts of the component Alias Path Handler. The manipulation results in improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as ac09b1177a100eafa85cba3cd09dd1f53f933ded. A patch should be applied to remediate this issue.