CVE-2026-73300

creationtimestamp| type| source ---|---|--- 2026-08-12 19:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msvteugu5u2g 2026-08-12 19:11:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cg3436nj7jxpf 2026-08-12 20:01:28+00:00| seen|...

CVE-2026-73300

Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious SQL commands through user input fields, leading t...

CVE-2026-73300

CVE-2026-73300 affects Budibase (open-source low-code platform). The MySQL integration component before version 3.40.0 is configured with multipleStatements: true, enabling injection of multiple SQL statements via user input fields and potentially full database compromise. Mitigation: upgrade to ...