CVE-2026-115738: SQL Injection
Published Nov 5, 2026
·Updated
SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated attacker to inject SQL queries without sanitization or parameterized queries.
Event History
Nov 5, 2026
CVE Published
via MITRE·03:06 PM
Data Sourced
via MITRE·03:06 PM
DescriptionWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
A remote attacker must be authenticated to exploit the vulnerability. The affected component is DLP on-prem extensions version 11.13.1 and earlier.
2
What is the potential impact of successful exploitation?
Successful exploitation can allow SQL query injection. The supplied severity vector indicates high impact to confidentiality, with no indicated integrity or availability impact.