CVE-2026-112067

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The software embeds the correct answer to each CAPTCHA within the image data of the CAPTCHA itself. This occurs in the default configuration because the audio feature, which triggers the embedding of the answer, is enabled by default. Consequently, any entity capable of requesting a CAPTCHA image can extract the answer and submit it, allowing automated clients to bypass the challenge. Forms that utilize this CAPTCHA as the sole defense against automated submissions are susceptible to bot abuse.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.