CWE-89

25 published stories · 4 KEV

CVE-2026-108107 — CVE-2026-108107 — PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRA… (36/100)
CVE-2026-81932 — CVE-2026-81932 — IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. (38/100)
CVE-2026-102428 — CVE-2026-102428 — Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order c… (36/100)
CVE-2026-76570 — CVE-2026-76570 — Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1… (39/100)
CVE-2026-101110 — CVE-2026-101110 — Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklib… (36/100)
CVE-2026-94130 — CVE-2026-94130 — Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An S… (36/100)
CVE-2026-97162 — CVE-2026-97162 — Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29 (32/100)
CVE-2026-76461 — Cisco Secure Email Gateway SQL Injection Vulnerability (86/100)
CVE-2026-9163 — CVE-2026-9163 — Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Inf… (38/100)
CVE-2026-78623 — CVE-2026-78623 — The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queri… (38/100)
CVE-2026-9586 — Sangoma Switchvox SQL Injection Vulnerability (75/100)
CVE-2026-16961 — CVE-2026-16961 — IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. (38/100)
CVE-2026-73663 — sangoma freepbx: FreePBX is an open source IP PBX. (36/100)
CVE-2026-72898 — Metabase SQL Injection Vulnerability (69/100)
CVE-2026-17111 — CVE-2026-17111 — IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. (38/100)
CVE-2026-17351 — CVE-2026-17351 — The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's exe… (36/100)
CVE-2026-4978 — CVE-2026-4978 — Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vi… (38/100)
CVE-2026-17543 — CVE-2026-17543 — Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP… (31/100)
CVE-2026-65890 — CVE-2026-65890 — Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors al… (35/100)
CVE-2026-60137 — WordPress Core SQL Injection Vulnerability (71/100)
CVE-2026-8297 — CVE-2026-8297 — Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Inf… (38/100)
CVE-2026-9074 — CVE-2026-9074 — IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injec… (38/100)
CVE-2026-14363 — mediawiki cargo: Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wik… (21/100)
CVE-2026-54350 — CVE-2026-54350 — Budibase is an open-source low-code platform. (38/100)
CVE-2026-39948 — CVE-2026-39948 — Cacti is an open source performance and fault management framework. (36/100)