CVE-2026-115192

An SQL Injection vulnerability exists in the Mautic dashboard widget data API endpoint (/api/data/{type}). The root cause is the improper validation of client-supplied chart filter parameters before they are used in database queries. An authenticated user with API access can leverage blind SQL in...