Sql Injection - Attack Type

Related Threat Clusters

• Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation

  SonicWall has reported two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 Series appliances, which are currently being actively exploited. The first vulnerability, CVE-2026-15409, is…

  27 articles · Updated July 15, 2026
• Critical SQL Injection Vulnerability in NocoBase (CVE-2026-52887)

  CVE-2026-52887 is a critical SQL injection vulnerability affecting NocoBase, an AI-powered no-code/low-code platform. The flaw allows unauthenticated remote attackers to execute arbitrary SQL queries via the…

  2 articles · Updated July 16, 2026
• SAP Releases January 2026 Security Patches for Critical Vulnerabilities

  On January 13, 2026, SAP issued 17 new security notes during its monthly Security Patch Day, addressing critical injection flaws and remote code execution vulnerabilities in key products. Organizations are urged to…

  6 articles · Updated January 13, 2026
• Critical SQL Injection Vulnerability in Drupal Core Actively Exploited

  A critical SQL injection vulnerability (CVE-2026-9082) in Drupal Core has been identified, affecting multiple supported versions. The vulnerability, with a CVSS score of 9.8, allows unauthenticated attackers to execute…

  6 articles · Updated May 25, 2026
• Critical SQL Injection Vulnerability in GPTranslate Plugin (CVE-2026-49776)

  A critical unauthenticated SQL injection vulnerability (CVE-2026-49776) has been identified in the GPTranslate plugin for WordPress, affecting versions 2.32.6 and earlier. This flaw allows attackers to execute arbitrary…

  3 articles · Updated June 16, 2026
• Critical cPanel Vulnerability Exploited in Southeast Asia Cyber Attacks

  A sophisticated cyber campaign has exploited a critical cPanel vulnerability (CVE-2026-41940) to breach government and military servers in Southeast Asia, particularly targeting Indonesia. The attackers utilized a…

  3 articles · Updated May 4, 2026
• Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign

  A critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS is being actively exploited in a large-scale cyberattack affecting over 700 websites, including those of Harvard University, Oxford University, Auburn…

  17 articles · Updated May 25, 2026
• Critical SQL Injection Vulnerability in CodeAstro Attendance System (CVE-2026-37749)

  A critical SQL injection vulnerability, identified as CVE-2026-37749, has been discovered in CodeAstro Simple Attendance Management System v1.0. This flaw allows remote unauthenticated attackers to bypass authentication…

  2 articles · Updated April 17, 2026
• Lazarus Group Escalates Attacks with Fileless RemotePE Trojan Targeting Crypto and Banks

  The Lazarus Group, a North Korea-linked cybercrime organization, has intensified its operations against financial and cryptocurrency sectors using a sophisticated fileless Remote Access Trojan (RAT) called RemotePE.…

  12 articles · Updated May 25, 2026
• Chinese AI Models Create Security Risks for US Code Development

  A Booz Allen Hamilton report reveals that Chinese AI models, when tasked with generating code for US government applications, produce significantly more vulnerable code. The report found that models like Qwen and…

  5 articles · Updated June 21, 2026

Recent Intelligence Reports

• Unc2447 Sombrat And Fivehands Ransomware Sophisticated Financial Threat — cloud.google.com · July 16, 2026
• CVE-2026-52887 AKAOMA CVE VULNERABILITIES / 12h NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to 2.0.61, NocoBase @nocobase/plugin-notification-in-app-message exposed GET /api/myInAppChannels:list, where the filter[latestMsgReceiveTimestamp][$lt] value was inserted into a Sequelize.literal() template string without escaping or parameter binding, allowing a signed-up authenticated user to run stacked PostgreSQL statements an — cve.akaoma.com · July 16, 2026
• 89 — cwe.mitre.org · July 16, 2026
• CVE-2026-52887 - Exploits & Severity — Feedly · July 16, 2026
• CVE 2026 44861 — nvd.nist.gov · July 15, 2026
• CVE 2026 44861 — www.tenable.com · July 15, 2026
• CVE-2026-44861 - Authenticated Remote Code Execution via SQL Injection in AOS — Notcve · July 14, 2026
• USN-8536-1: MariaDB vulnerabilities — Ubuntu · July 14, 2026

Related Entities