CVE-2026-72851

creationtimestamp| type| source ---|---|--- 2026-08-13 23:00:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msyqp4lx6j2j 2026-08-14 03:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117091626314475860 2026-08-14 03:00:29+00:00| seen|...

CVE-2026-72851

Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXECUTEQUERY steps. Attackers can POST attacker-controlled JSON to the webhook trigger endpoint to inject SQL payloads that execute with builder-configured database credentials,...