Exploit for CVE-2026-0603

🗓️ 21 Aug 2026 04:19:19Reported by yym8538Type

Second-order SQL injection in Hibernate ORM 5.2.8 to 5.6.15 via unsanitized primary keys in bulk DELETE or UPDATE operations causes mass data deletion or modification.

Reporter	Title	Published	Views	Family All 50
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	2 Mar 202606:11	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Hibernate Vulnerability in IBM Library Support for Hibernate	13 Apr 202615:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	7 May 202613:57	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the Hibernate library	10 Apr 202613:46	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of hibernate-core. IBM webMethods BPM is vulnerable to a second-order SQL injection	27 Mar 202608:03	–	ibm
ATTACKERKB	CVE-2026-0603	23 Jan 202606:31	–	attackerkb
Atlassian	SQLi (SQL Injection) org.hibernate:hibernate-core-jakarta Dependency in Bamboo Data Center	7 Aug 202616:31	–	atlassian
Atlassian	SQLi (SQL Injection) org.hibernate:hibernate-core Dependency in Confluence Data Center	21 May 202621:30	–	atlassian
Atlassian	SQLi (SQL Injection) org.hibernate:hibernate-core-jakarta Dependency in Crowd Data Center	1 Aug 202604:31	–	atlassian
Circl	CVE-2026-0603	23 Jan 202608:41	–	circl