CVE-2026-119554

Moodle versions 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 are susceptible to an SQL Injection vulnerability in the External database enrolment plugin . The flaw exists in the handling of the course idnumber field. Specifically, editing teachers can ...

EUVD-2026-113819

Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contain an sql injection vulnerability in the External database enrolment plugin via course idnumber. Editing teachers can store a backslash-quote payload in idnumber that executes during scheduled sy...

CVE-2026-119427 phpMyAdmin through 5.2.3 SQL Injection via Designer saveSetting

phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting that allows authenticated users to inject SQL via unescaped jsonencode output. Attackers can send crafted index or value parameters with operation=savesettingvalue to /database/designer to overwrite other...

EUVD-2026-113807

phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting that allows authenticated users to inject SQL via unescaped jsonencode output. Attackers can send crafted index or value parameters with operation=savesettingvalue to /database/designer to overwrite other...

CVE-2026-119427

Versions of phpMyAdmin through 5.2.3 are vulnerable to an SQL injection flaw within the Designer saveSetting() function. The root cause is the use of unescaped json_encode() output. This allows authenticated users to send crafted index or value parameters via the /database/designer endpoint (usin...

CVE-2026-119424 OPNsense before 26.7.8 Wireless WPA Configuration Line Injection via Identity

OPNsense core before 26.7.8 contains a configuration line injection vulnerability that allows authenticated users with wireless-edit privilege to inject directives by embedding CR/LF characters in WPA fields. Attackers can place newlines in wpa.identity, wpa.passphrase, or RADIUS shared secrets t...

EUVD-2026-113804

OPNsense core before 26.7.8 contains a configuration line injection vulnerability that allows authenticated users with wireless-edit privilege to inject directives by embedding CR/LF characters in WPA fields. Attackers can place newlines in wpa.identity, wpa.passphrase, or RADIUS shared secrets t...

CVE-2026-119424

OPNsense core versions before 26.7.8 are vulnerable to a configuration line injection vulnerability. This issue allows authenticated users possessing wireless-edit privileges to inject arbitrary directives into configuration files by embedding CR/LF characters within WPA fields, such as wpa.ident...

CVE-2026-119423 OPNsense core before 26.7.8 Lockout IP Planting via WebGUI Login Username

OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to plant victim IP addresses in the lockouthandler by submitting crafted WebGUI login usernames. Attackers can submit usernames like 'Invalid user ' repeatedly to add the victim to the...

EUVD-2026-113803

OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to plant victim IP addresses in the lockouthandler by submitting crafted WebGUI login usernames. Attackers can submit usernames like 'Invalid user ' repeatedly to add the victim to the...

CVE-2026-119423

OPNsense core versions prior to 26.7.8 are vulnerable to a log injection vulnerability (CWE-117). This flaw allows unauthenticated attackers to plant arbitrary victim IP addresses into the lockout_handler by submitting crafted usernames during WebGUI login attempts. By repeatedly submitting usern...

CVE-2026-119423 OPNsense core before 26.7.8 Lockout IP Planting via WebGUI Login Username

OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to plant victim IP addresses in the lockouthandler by submitting crafted WebGUI login usernames. Attackers can submit usernames like 'Invalid user ' repeatedly to add the victim to the...

CVE-2026-119418 CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()

CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated frame offsets and directions to WindowExpression::range and frame. Attackers can pass crafted values through applications forwarding user input into the OVER clause to execut...

CVE-2026-119419 CakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression Collation

CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated collation values to StringExpression and IdentifierExpression. Attackers controlling a collation name passed to the constructor or setCollation can append SQL after the...

EUVD-2026-113799

CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated collation values to StringExpression and IdentifierExpression. Attackers controlling a collation name passed to the constructor or setCollation can append SQL after the...

EUVD-2026-113798

CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated frame offsets and directions to WindowExpression::range and frame. Attackers can pass crafted values through applications forwarding user input into the OVER clause to execut...

CVE-2026-119418 CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()

CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated frame offsets and directions to WindowExpression::range and frame. Attackers can pass crafted values through applications forwarding user input into the OVER clause to execut...

CVE-2026-119419

CakePHP versions through 5.4.3 are vulnerable to an SQL Injection flaw in the StringExpression and IdentifierExpression components. The root cause is the use of unvalidated collation values; an attacker who controls a collation name passed to the constructor or the setCollation() method can appen...

CVE-2026-119418

CakePHP versions through 5.4.3 are vulnerable to an SQL injection vulnerability within the WindowExpression::range() and frame() functions. The root cause is the processing of unvalidated frame offsets and directions . Attackers can exploit this by providing crafted values through applications th...

CVE-2026-119417 CakePHP through 5.4.3 Email Header Injection via Bare CR/LF in SmtpTransport and MailTransport

CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 contain an email header injection vulnerability because SmtpTransport and MailTransport strip only CRLF pairs from header values, an incomplete fix for CVE-2026-77634. Attackers controlling custom...