Lucene search
+L

3 matches found

OSV
OSV
added 2026/08/11 6:29 p.m.20 views

CVE-2026-69117 NetBox 4.5.8 ORM Injection via WritableNestedSerializer

NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...

7.1CVSS5.6AI score
SaveExploits0References7
CVE
CVE
added 2026/08/11 6:29 p.m.42 views

CVE-2026-69117

CVE-2026-69117 : NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH re...

7.1CVSS5.5AI score0.0025EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/11 6:29 p.m.38 views

CVE-2026-69117 NetBox 4.5.8 ORM Injection via WritableNestedSerializer

NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...

7.1CVSS0.0025EPSS
SaveExploits0References5
Rows per page
Query Builder