CVE-2026-115332

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by registering crafted subscriptionfilterkeys that bypass keyword-only validation. Attackers can create subscriptions using the malicious key, which is rendered as an unquoted...

CVE-2026-115332 Lotus through 0.10.2 SQL Injection via Subscription Filter Keys

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by registering crafted subscriptionfilterkeys that bypass keyword-only validation. Attackers can create subscriptions using the malicious key, which is rendered as an unquoted...

CVE-2026-115332

Lotus versions through 0.10.2 are vulnerable to an SQL injection vulnerability. Authenticated organization users can bypass keyword-only validation by registering crafted subscription_filter_keys . These malicious keys are rendered as unquoted group-by identifiers, allowing attackers to inject SQ...

EUVD-2026-108134

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by registering crafted subscriptionfilterkeys that bypass keyword-only validation. Attackers can create subscriptions using the malicious key, which is rendered as an unquoted...