CVE-2026-71287

creationtimestamp| type| source ---|---|--- 2026-08-05 13:55:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dpeo2ycooev7n...

CVE-2026-71287

Cacti's sanitizesqlcolumn lib/functions.php sanitizes user-supplied ORDER BY column names using the regex . Because this allowlist retains letters, digits, underscore, parentheses, and dot intended to support expressions like COUNTid and table.column, a payload such as passes through completely...