PT-2026-108938

Name of the Vulnerable Software and Affected Versions PHPNuxBill versions prior to 2025.3.21 Description An unauthenticated SQL injection exists in the radius.php FreeRADIUS REST endpoint. The issue occurs because request parameters are interpolated into whereRaw queries. An attacker can send...

PT-2026-108847

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3...

CVE-2026-108107: Improper Neutralization of Special Elements used in an SQL Command

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions to...

CVE-2026-96809: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MultiNet Interactive AB EduAdmin Booking eduadmin-booking allows Blind SQL Injection.This issue affects EduAdmin Booking: from n/a before 6.0.0...

CVE-2026-108124: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0...

CVE-2026-107803: Improper Neutralization of Special Elements used in an SQL Command

ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the orderby parameter because ProcessMaker\Traits\TaskControllerIndexMethods::applyColumnOrdering concatenates a...

Microsoft SQL Server Buffer Overflow

The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Microsoft SQL Server Buffer Overflow

The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Microsoft SQL Server Privilege Escalation

The vulnerability of the Microsoft SQL Server database management system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft SQL Server Buffer Overflow

The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

CVE-2026-84209

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-81932

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-80381

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...

CVE-2025-71428

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

com.hazelcast:hazelcast-build-utils (4.1.6), com.hazelcast:hazelcast-spring (4.1.6) +3 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.1.6)

com.hazelcast:hazelcast MAVEN version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1.6 - com.hazelcast:hazelcast-spring 4.1.6 - com.hazelcast:hazelcast-sql...

com.efluid.oss:efluid-datagate-app (>=5.1.7, <=5.1.14), com.efluid.oss:efluid-datagate-app-cucumber (>=5.1.7, <=5.1.14) +8 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.1.8)

com.hazelcast:hazelcast MAVEN version 4.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.efluid.oss:efluid-datagate-app =5.1.7, =5.1.7, =4.32.0, =3.11.5, =3.11.7 Source cves: CVE-2026-107726 Source...

com.hazelcast.jet:hazelcast-jet-core (4.5.4), com.hazelcast.jet:hazelcast-jet-hadoop-core (4.5.4) +24 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.2.6)

com.hazelcast:hazelcast MAVEN version 4.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-core 4.5.4 - com.hazelcast.jet:hazelcast-jet-hadoop-core 4.5.4 -...

com.hazelcast:hazelcast-build-utils (4.1-beta-1), com.hazelcast:hazelcast-spring (4.1-beta-1) +1 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.1-beta-1)

com.hazelcast:hazelcast MAVEN version 4.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1-beta-1 - com.hazelcast:hazelcast-spring 4.1-beta-1 -...

com.hazelcast:hazelcast-build-utils (4.2-beta-1), com.hazelcast:hazelcast-spring (4.2-beta-1) +2 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.2-beta-1)

com.hazelcast:hazelcast MAVEN version 4.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.2-beta-1 - com.hazelcast:hazelcast-spring 4.2-beta-1 -...

cn.spider-node:client (>=1.0.2, <=1.0.2.2), cn.spider-node:linker-client (>=1.0.2, <=1.0.3) +28 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.2.8)

com.hazelcast:hazelcast MAVEN version 4.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - cn.spider-node:client =1.0.2, =1.0.2, =1.3.0, =0.23.0, =0.23.0, =4.4.3, =4.4.3, =4.4.3, =3.5.7, =3.5.11 and more...