CVE-2026-66738

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

August 10, 2026

Last Seen

August 10, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SQL Injection Vulnerability Discovered in ReadyEcommerce (CVE-2026-63106)78.0

A critical unauthenticated SQL injection vulnerability, CVE-2026-63106, has been identified in ReadyEcommerce versions prior to 4.5.2. The flaw exists in the product listing API, where the rating parameter is unsanitized and directly concatenated into a MySQL HAVING clause in ProductController.php....