CVE-2026-34105

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

July 2, 2026

Last Seen

July 2, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SQL Injection Vulnerabilities Discovered in Guardian Language-System72.0

Two critical SQL injection vulnerabilities, CVE-2026-34105 and CVE-2026-34103, were identified in the Guardian language-system, affecting the translate_text.php and subtitles.php files respectively. Both vulnerabilities allow authenticated attackers to execute error-based SQL injection attacks, enab...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical SQL Injection Vulnerabilities Discovered in Guardian Language-System

Jul 2·2 sources

Related Articles (3)

CVE-2026-34105 CVE Vulnerability Disclosures / 21h Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in translate_text.php (line 15): SELECT id, filename, extension, type FROM files where id = '\".$_GET['id'].\"'. An authenticated attacker can perform error-based SQL injection to extract database contents.

cve.report·Jul 2

CVE-2026-34105 National Vulnerability Database / 20h Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in translate_text.php (line 15): SELECT id, filename, extension, type FROM files where id = '\".$_GET['id'].\"'. An authenticated attacker can perform error-based SQL injection to extract database contents.

nvd.nist.gov·Jul 2

CVE-2026-34105 - Exploits & Severity

Related Entities

Sql Injection CWE-89 - SQL Injection T1190 - Exploit Public-Facing Application PHP