CVE-2026-63039

creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:03+00:00| seen| Telegram/8ioC0-GS3hqaK0vZF92ZaP06wwac1xjhQxJkXlFfEhMVG4 2026-08-25 00:00:10+00:00| published-proof-of-concept| Telegram/8ioC0-GS3hqaK0vZF92ZaP06wwac1xjhQxJkXlFfEhMVG4...

CVE-2026-63039

Apache InLong versions 2.0.0 through 2.3.x are vulnerable to an SQL injection (CWE-89) due to improper neutralization of special elements in SQL commands. The root cause is the use of unvalidated MyBatis ${} string interpolation within the AuditAlertRuleEntityMapper.selectByCondition method. Spec...