CVE-2026-49489: OpenCATS - SQL Injection in DataGrid sortDirection Parameter
OpenCATS through 0.9.7.4 contains a sql injection vulnerability in the sortDirection parameter of the DataGrid component that allows authenticated users to extract database contents. Attackers can inject malicious SQL via the sortDirection parameter in ajax/getDataGridPager.php to perform time-based blind injection attacks and read sensitive data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
opencats/datagrid (ajax/getDataGridPager.php)from your environment.If the DataGrid/ajax/getDataGridPager.php endpoint is not required, disable or remove that endpoint/component to eliminate the vulnerable attack surface.
- Configuration
Validate and/or whitelist allowed values for the sortDirection parameter and modify ajax/getDataGridPager.php to use parameterized queries or prepared statements for any database access to prevent SQL injection.
OpenCATS DataGrid (ajax/getDataGridPager.php) sortDirection parameter handling = whitelist/validate and use parameterized queries - Compensating control
Restrict access to ajax/getDataGridPager.php to trusted IP addresses or internal networks using firewall rules or a WAF. Additionally, deploy request filtering or rate-limiting to block requests that contain malicious payloads targeting the sortDirection parameter.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-49489?
CVE-2026-49489 has a severity score of 8.5, which is classified as high.
How do I fix CVE-2026-49489?
To mitigate CVE-2026-49489, update OpenCATS to version 0.9.7.5 or later, ensuring the sortDirection parameter is validated.
Who is affected by CVE-2026-49489?
Any authenticated user on OpenCATS versions up to 0.9.7.4 can exploit the vulnerability due to insufficient parameter validation.
What kind of attack can be performed using CVE-2026-49489?
CVE-2026-49489 allows attackers to perform SQL injection attacks via the sortDirection parameter, potentially retrieving sensitive database information.
What component of OpenCATS is affected by CVE-2026-49489?
The vulnerability is present in the DataGrid component of OpenCATS, specifically in the ajax/getDataGridPager.php file.