EUVD-2026-72958

mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

CVE-2026-79570

CVE-2026-79570 affects mfish-nocode-pro v1.0.0 , a low-code platform. The vulnerability is a SQL injection in the tableName parameter at the endpoint /sys/dbConnect/data , allowing attackers to access sensitive database information via a crafted SQL statement. No patch version or workaround is me...