CVE-2026-15623: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. This vulnerability was patched in version...

PT-2023-21204

Name of the Vulnerable Software and Affected Versions pimcore/customer-data-framework versions prior to 3.3.10 Description The issue allows an administrator user to execute blind SQL queries using the inheritable segments feature. This can lead to the retrieval of sensitive data, modification of...