PT-2026-108742

Name of the Vulnerable Software and Affected Versions Code Snippets WordPress plugin versions prior to 3.10.0 Description Insufficient sanitization and escaping of a user-supplied parameter in snippet-migration import endpoints allows users with site-administration capabilities to perform...

CVE-2026-96331: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro: from n/a through 4.29.1...

Django 4.0.5 Trunc SQL Injection

Django version 4.0.5 contains a SQL injection vulnerability in the Trunc and Extract database functions when user-controlled date units are inserted into generated SQL without escaping. Includes a proof of concept vulnerable environment. https://packetstorm.news/download/235022...

Splunk Enterprise 10.4.0 < 10.4.3 (SVD-2026-1001)

The version of Splunk Enterprise installed on the remote host is 10.4.x prior to 10.4.3. Splunk Enterprise 10.2.x, 10.0.x, and 9.4.x are not affected. It is, therefore, affected by a SQL injection vulnerability as referenced in the SVD-2026-1001 advisory. A user that holds a role with the...

CVE-2026-108100: Improper Neutralization of Special Elements used in an SQL Command

HortusFox hortusfox-web before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint. Attackers can place subqueries in includeinfo, which PlantsModel::getSpecificInfo concatenates into t...

PT-2026-108926

HortusFox hortusfox-web before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include info values to the /api/locations/list endpoint. Attackers can place subqueries in include info, which PlantsModel::getSpecificInfo concatenates into...

PT-2026-108832

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2...

CVE-2026-84209

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-80381

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...

CVE-2026-81932

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2025-71428

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

com.hazelcast:hazelcast-build-utils (4.1.7), com.hazelcast:hazelcast-spring (4.1.7) +2 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.1.7)

com.hazelcast:hazelcast MAVEN version 4.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1.7 - com.hazelcast:hazelcast-spring 4.1.7 - com.hazelcast:hazelcast-sql...

com.hazelcast:hazelcast-build-utils (4.2-beta-1), com.hazelcast:hazelcast-spring (4.2-beta-1) +2 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.2-beta-1)

com.hazelcast:hazelcast MAVEN version 4.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.2-beta-1 - com.hazelcast:hazelcast-spring 4.2-beta-1 -...

com.hazelcast:hazelcast-build-utils (4.1-beta-1), com.hazelcast:hazelcast-spring (4.1-beta-1) +1 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.1-beta-1)

com.hazelcast:hazelcast MAVEN version 4.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1-beta-1 - com.hazelcast:hazelcast-spring 4.1-beta-1 -...

com.hazelcast.jet:hazelcast-jet-core (4.5.4), com.hazelcast.jet:hazelcast-jet-hadoop-core (4.5.4) +24 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.2.6)

com.hazelcast:hazelcast MAVEN version 4.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-core 4.5.4 - com.hazelcast.jet:hazelcast-jet-hadoop-core 4.5.4 -...

cn.spider-node:client (>=1.0.2, <=1.0.2.2), cn.spider-node:linker-client (>=1.0.2, <=1.0.3) +28 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.2.8)

com.hazelcast:hazelcast MAVEN version 4.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - cn.spider-node:client =1.0.2, =1.0.2, =1.3.0, =0.23.0, =0.23.0, =4.4.3, =4.4.3, =4.4.3, =3.5.7, =3.5.11 and more...

com.efluid.oss:efluid-datagate-app (>=5.1.7, <=5.1.14), com.efluid.oss:efluid-datagate-app-cucumber (>=5.1.7, <=5.1.14) +8 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.1.8)

com.hazelcast:hazelcast MAVEN version 4.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.efluid.oss:efluid-datagate-app =5.1.7, =5.1.7, =4.32.0, =3.11.5, =3.11.7 Source cves: CVE-2026-107726 Source...

com.hazelcast:hazelcast-build-utils (4.1.6), com.hazelcast:hazelcast-spring (4.1.6) +3 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.1.6)

com.hazelcast:hazelcast MAVEN version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1.6 - com.hazelcast:hazelcast-spring 4.1.6 - com.hazelcast:hazelcast-sql...

com.hazelcast.jet:hazelcast-jet-core (4.5.2), com.hazelcast.jet:hazelcast-jet-hadoop-core (4.5.2) +5 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.2.3)

com.hazelcast:hazelcast MAVEN version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-core 4.5.2 - com.hazelcast.jet:hazelcast-jet-hadoop-core 4.5.2 -...

com.hazelcast:hazelcast-build-utils (4.1-beta-1), com.hazelcast:hazelcast-spring (4.1-beta-1) +1 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.1-beta-1)

com.hazelcast:hazelcast MAVEN version 4.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1-beta-1 - com.hazelcast:hazelcast-spring 4.1-beta-1 -...