CVE-2026-116808

OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to read cross-tenant data by supplying a crafted property parameter to profile.values. Attackers can inject a SELECT expression with their own FROM/WHERE clauses and comment out the projectid scope to...

PT-2026-126305

Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox 2.20.4.2 - On store product list pages, the value of the sort-by URL parameter is retrieved using a string filter and passed directly to GridboxHelper::getBlogPosts. When the parameter does not match known sorting keys, it ...

PT-2026-126653

A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account...

PT-2026-126700

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to...

CVE-2026-106076: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account...

Adobe Campaign Classic SQL injection vulnerability

Adobe Campaign Classic versions 7.4.4 build 9402 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially allowing attackers to execute arbitrary SQL commands. Such actions may result in privilege...

CVE-2026-104354: Improper Neutralization of Special Elements used in an SQL Command

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to...

CVE-2026-117514: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customerdetail.php of the component Admin Record Pages. The manipulation of the argument costomerid/ticketid/empid/salaryid/pageid leads to sql injection. It is...

Tanium patch SQL injection vulnerability

Versions prior to Tanium patch 3.24.306, versions prior to 3.28.325, and versions prior to 3.32.353 contain an SQL injection vulnerability. This vulnerability stems from SQL injection flaws...

Adobe Campaign Classic SQL injection vulnerability

Adobe Campaign Classic versions 7.4.4 build 9402 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially allowing attackers with elevated privileges to execute arbitrary code within the context of the...

Adobe Campaign Classic SQL injection vulnerability

Adobe Campaign Classic versions 7.4.4 build 9402 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially allowing attackers with low privileges to execute arbitrary code within the context of the...

Oretnom23 Online Travel Agency System input validation error vulnerability

The Oretnom23 Online Travel Agency System has a security vulnerability. This vulnerability stems from improper handling of parameters such as name, company, email, topic, phone, and comments within the Contact Form Handler component in the contactinsert.php file, potentially leading to SQL...

PT-2026-126702

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthoriz...

NVIDIA NeMo Agent ToolKit SQL injection vulnerability

Versions 1.4 through 1.6 of the NVIDIA NeMo Agent ToolKit contain an SQL injection vulnerability. This vulnerability may lead to data tampering, denial of service, and information leakage...

YesWiki SQL injection vulnerability

Versions of YesWiki prior to 4.7.0 contain an SQL injection vulnerability. This flaw arises because AclService::updateRequestWithACL inserts usernames into the SQL LIKE pattern without escaping the and % wildcards. As a result, it becomes possible to read ACLs bypassed. Attackers can exploit this...

PT-2026-126701

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

OpenPanel SQL injection vulnerability

Versions of OpenPanel prior to 3.0.0 contain an SQL injection vulnerability. This vulnerability arises when unescaped profile filter names are inserted into JOIN subqueries. As a result, authenticated users can exploit specially crafted filter names containing trailing comments to bypass the...

OpenPanel SQL injection vulnerability

Versions prior to OpenPanel 3.0.0 contain an SQL injection vulnerability. This flaw stems from the lack of session and project access checks on the projectId parameter in the /live/visitors/:projectId WebSocket. It is susceptible to ClickHouse SQL injection attacks, potentially allowing remote...

PT-2026-126704

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL...

Vulnerabilities Resolved in Veeam Backup for Microsoft 365 8.6

Issue Details CVE-2026-106076 A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the...