CVE-2026-64618

An SQL injection vulnerability (CWE-89) exists in Apache Fineract affecting versions up to and including 1.15.0 . The flaw is caused by insufficient input neutralization in the outStandingAmountPercentageCondition parameter of the /fineract-provider/api/v1/search/advance HTTP API endpoint. This a...