CVE-2026-19926

creationtimestamp| type| source ---|---|--- 2026-08-16 03:55:05+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mt6c4glkgf2m...

CVE-2026-19926 Evergreen open-ils.fielder OpenSRF Service osrf-gateway-v1 sql injection

A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown function of the file /osrf-gateway-v1 of the component open-ils.fielder OpenSRF Service. Such manipulation leads to sql injection. The attack can be executed remotely. The explo...