Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:13 p.m.•22 views

CVE-2026-40835

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the saveObjectFromData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS5.8AI score0.00445EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/27 9:16 a.m.•42 views

CVE-2026-40835

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the saveObjectFromData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS0.00445EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/27 7:56 a.m.•13 views

CVE-2026-40835 Authenticated SQLi in saveObjectFromData function

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the saveObjectFromData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS6AI score0.00445EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/27 7:56 a.m.•37 views

CVE-2026-40835

CVE-2026-40835 describes an unauthenticated SQL Injection in the saveObjectFromData function, exploitable by a low-privileged remote attacker. Root cause: improper neutralization of special elements in a SQL SELECT command. Impact: total confidentiality loss. Documents from NVD and CVE lists conf...

7.1CVSS6AI score0.00445EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/27 7:56 a.m.•24 views

EUVD-2026-32134

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the saveObjectFromData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS5.9AI score0.00445EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/27 7:56 a.m.•11 views

CVE-2026-40835

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the saveObjectFromData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS5.9AI score0.00445EPSS
SaveExploits0References2Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•3 views

CVE-2026-40835: Improper Neutralization of Special Elements used in an SQL Command

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the saveObjectFromData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS5.9AI score0.00445EPSS
SaveExploits0References2
Rows per page
Query Builder