CVE-2026-126291

NocoDB before 2026.06.2 contains an SQL injection vulnerability in base-user.cte.utils.ts, which concatenates base members' email addresses into the SQL text of queries resolving user, created-by or last-modified-by fields. Registered users can set an email with a quoted local part containing a...

CVE-2026-126291

NocoDB versions prior to 2026.06.2 are vulnerable to an SQL injection flaw in base-user.cte.utils.ts. The root cause is the unsafe concatenation of base members' email addresses into SQL queries used to resolve user , created-by , or last-modified-by fields. Registered users can exploit this by s...

CVE-2026-126291 NocoDB before 2026.06.2 SQL Injection via User Email in Base User Query

NocoDB before 2026.06.2 contains an SQL injection vulnerability in base-user.cte.utils.ts, which concatenates base members' email addresses into the SQL text of queries resolving user, created-by or last-modified-by fields. Registered users can set an email with a quoted local part containing a...

EUVD-2026-125230

NocoDB before 2026.06.2 contains an SQL injection vulnerability in base-user.cte.utils.ts, which concatenates base members' email addresses into the SQL text of queries resolving user, created-by or last-modified-by fields. Registered users can set an email with a quoted local part containing a...

PT-2026-146622

NocoDB before 2026.06.2 contains an SQL injection vulnerability in base-user.cte.utils.ts, which concatenates base members' email addresses into the SQL text of queries resolving user, created-by or last-modified-by fields. Registered users can set an email with a quoted local part containing a...

CVE-2026-124468

OpenEMR versions before 8.3.0 are vulnerable to an SQL injection vulnerability within the Standard REST API's patient insurance and employer search functions. The root cause is the improper concatenation of query-string parameter names into SQL statements as column identifiers without sufficient ...

CVE-2026-90960

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.29.24 via the WPObjectCache::getFilePath. This makes it possible for unauthenticated attackers to extract complete WordPress user records — including plaintext...

WordPress Seraphinite Accelerator information disclosure vulnerability

WordPress Seraphinite Accelerator versions 2.29.24 and earlier contain an information disclosure vulnerability. This vulnerability stems from improper handling in WPObjectCache::getFilePath; unauthenticated attackers can extract full WordPress user records from the predictable gzip-serialized cac...

PT-2026-134464

Name of the Vulnerable Software and Affected Versions Seraphinite Accelerator versions prior to 2.29.25 Description An issue exists in the WP Object Cache:: getFilePath function that allows unauthenticated attackers to extract complete WordPress user records. This includes plaintext user login,...

ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories

Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn't. There's a strange mix of clever tricks and careless mistakes. Hackers are borrowing trust from...

Bricks Theme code injection vulnerability

Bricks Theme versions 2.4.3 and earlier contain a code injection vulnerability. This vulnerability arises because unauthenticated attackers can control the urlParams object within the queryresult REST endpoint, causing submitted values to be re-parsed as Bricks dynamic data tags. These tags may...

CVE-2026-111689

Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to read user records of any department by ignoring role data scope. Attackers can request GET /xboot/user/getByDepartmentId/departmentId with arbitrary department ids to retrieve usernames,...

CVE-2026-111689 XBoot through 3.3.4 Authorization Bypass via getByDepartmentId Endpoint

Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to read user records of any department by ignoring role data scope. Attackers can request GET /xboot/user/getByDepartmentId/departmentId with arbitrary department ids to retrieve usernames,...

EUVD-2026-102980

Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to read user records of any department by ignoring role data scope. Attackers can request GET /xboot/user/getByDepartmentId/departmentId with arbitrary department ids to retrieve usernames,...

CVE-2026-111689 XBoot through 3.3.4 Authorization Bypass via getByDepartmentId Endpoint

Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to read user records of any department by ignoring role data scope. Attackers can request GET /xboot/user/getByDepartmentId/departmentId with arbitrary department ids to retrieve usernames,...

CVE-2026-111689

Exrick XBoot versions through 3.3.4 are vulnerable to an authorization bypass (CWE-639) in the getByDepartmentId endpoint. The flaw allows authenticated users to bypass role data scope restrictions by requesting the GET /xboot/user/getByDepartmentId/{departmentId} path with arbitrary IDs. This en...

CVE-2026-111689

Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to read user records of any department by ignoring role data scope. Attackers can request GET /xboot/user/getByDepartmentId/departmentId with arbitrary department ids to retrieve usernames,...

PT-2026-116088

🚨 CVE-2026-111689 Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to read user records of any department by ignoring role data scope. Attackers can request GET /xboot/user/getByDepartmentId/departmentId with arbitrary department ids to...

CVE-2026-111689: Authorization Bypass Through User-Controlled Key

Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to read user records of any department by ignoring role data scope. Attackers can request GET /xboot/user/getByDepartmentId/departmentId with arbitrary department ids to retrieve usernames,...

CVE-2026-103239

MISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted the full HTTP request payload and passed it to a bulk-association save operation, which writes not only the intended tag collection record but also any...