CVE-2026-118871: SQL Injection
Published Nov 2, 2026
·Updated
SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection while logged in.
Event History
Nov 2, 2026
CVE Published
via NVD·10:17 AM
Data Sourced
via NVD·10:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker must be logged in, so exploitation requires at least low-privileged authenticated access. No user interaction is required, and the attack can be performed over the network.
2
What is the expected impact if exploitation succeeds?
An attacker can use SQL injection to obtain database information. The stated impact is confidentiality loss; integrity and availability impacts are not indicated.