CVE-2026-9059

🗓️ 20 May 2026 07:41:28Reported by tenableType

cve🔗 web.nvd.nist.gov👁 14 Views🌐 WEB

Authenticated structured query language injection in NextGEN Gallery before 4.2.1 via orderby on REST endpoints.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-9059	20 May 202607:41	–	attackerkb
Circl	CVE-2026-9059	20 May 202611:04	–	circl
CNNVD	WordPress plugin NextGEN Gallery SQL注入漏洞	20 May 202600:00	–	cnnvd
Cvelist	CVE-2026-9059 NextGEN Gallery - SQL Injection	20 May 202607:41	–	cvelist
EUVD	EUVD-2026-31073	20 May 202607:41	–	euvd
NVD	CVE-2026-9059	20 May 202609:16	–	nvd
Positive Technologies	PT-2026-42122	20 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-9059	5 Jun 202619:18	–	redhatcve
Vulnrichment	CVE-2026-9059 NextGEN Gallery - SQL Injection	20 May 202607:41	–	vulnrichment

[
  {
    "vendor": "awesomemotive",
    "product": "NextGEN Gallery",
    "collectionURL": "https://fr.wordpress.org/plugins/nextgen-gallery/",
    "versions": [
      {
        "status": "affected",
        "version": "O",
        "lessThan": "4.2.1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2026-42

Parameter	Position	Path	Description	CWE
orderby	query param	/imagely/v1/galleries	Authenticated SQL injection via orderby parameter in NextGEN Gallery REST endpoint, caused by insufficient sanitization using a blacklist approach.	CWE-89
orderby	query param	/imagely/v1/albums	Authenticated SQL injection via orderby parameter in NextGEN Gallery REST endpoint, caused by insufficient sanitization using a blacklist approach.	CWE-89

17 Jun 2026 11:04Current

6Medium risk

Vulners AI Score6

CVSS 49.3

EPSS0.00287

SSVC

CWE-89