Skip to content

CVE-2026-73698

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
September 11, 2026
Last Seen
September 11, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SQL Injection Vulnerabilities in FileRun Lead to RCE Risks72.0

VulnCheck disclosed four vulnerabilities in FileRun, a self-hosted file management platform, allowing remote code execution (RCE) via SQL injection and deserialization flaws. The vulnerabilities are identified as CVE-2026-73693, CVE-2026-73694, CVE-2026-73698, and CVE-2026-73699, all published on 20...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Sql InjectionZero-day ExploitCVE-2026-73693CVE-2026-73694CVE-2026-73699CWE-89 - SQL InjectionCWE-502 - Deserialization Of Untrusted DataCWE-78 - OS Command InjectionT1059 - Command and Scripting InterpreterT1068 - Exploitation for Privilege EscalationT1190 - Exploit Public-Facing ApplicationApache Tika