CVE-2026-77635

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-77635 CVE-2026-77635 CakePHP 5.2.13 - cakephp I am @abraxasnull. Loopback lab. The client is CVE-2026-77635-Abraxas-Labs.py. JSONVALUE is not bound. FunctionsBuilder::jsonValue with PostgresDriver rewrites to...