Cwe-89 - SQL Injection - Cwe

Related Threat Clusters

• Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation

  SonicWall has reported two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 Series appliances, which are currently being actively exploited. The first vulnerability, CVE-2026-15409, is…

  30 articles · Updated July 15, 2026
• Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild

  A critical command injection vulnerability, CVE-2026-42271, in LiteLLM, an open-source AI gateway, allows unauthenticated remote code execution (RCE) when chained with CVE-2026-48710, a Host header validation bypass in…

  17 articles · Updated June 9, 2026
• Critical SQL Injection Vulnerability in NocoBase (CVE-2026-52887)

  CVE-2026-52887 is a critical SQL injection vulnerability affecting NocoBase, an AI-powered no-code/low-code platform. The flaw allows unauthenticated remote attackers to execute arbitrary SQL queries via the…

  2 articles · Updated July 16, 2026
• Critical SQL Injection Vulnerability in Drupal Core Actively Exploited

  A critical SQL injection vulnerability (CVE-2026-9082) in Drupal Core has been identified, affecting multiple supported versions. The vulnerability, with a CVSS score of 9.8, allows unauthenticated attackers to execute…

  6 articles · Updated May 25, 2026
• Critical SQL Injection Vulnerability in GPTranslate Plugin (CVE-2026-49776)

  A critical unauthenticated SQL injection vulnerability (CVE-2026-49776) has been identified in the GPTranslate plugin for WordPress, affecting versions 2.32.6 and earlier. This flaw allows attackers to execute arbitrary…

  3 articles · Updated June 16, 2026
• Critical cPanel Vulnerability Exploited in Southeast Asia Cyber Attacks

  A sophisticated cyber campaign has exploited a critical cPanel vulnerability (CVE-2026-41940) to breach government and military servers in Southeast Asia, particularly targeting Indonesia. The attackers utilized a…

  3 articles · Updated May 4, 2026
• Critical SSTI Vulnerability in FOSSBilling Exposes Databases to RCE Attacks

  A critical server-side template injection (SSTI) vulnerability in FOSSBilling, tracked as CVE-2026-28496, was disclosed on June 23, 2026. This flaw affects all versions up to 0.7.2 and allows attackers to exploit unsafe…

  2 articles · Updated June 26, 2026
• Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign

  A critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS is being actively exploited in a large-scale cyberattack affecting over 700 websites, including those of Harvard University, Oxford University, Auburn…

  17 articles · Updated May 25, 2026
• Critical SQL Injection Vulnerability in CodeAstro Attendance System (CVE-2026-37749)

  A critical SQL injection vulnerability, identified as CVE-2026-37749, has been discovered in CodeAstro Simple Attendance Management System v1.0. This flaw allows remote unauthenticated attackers to bypass authentication…

  2 articles · Updated April 17, 2026
• Lazarus Group Escalates Attacks with Fileless RemotePE Trojan Targeting Crypto and Banks

  The Lazarus Group, a North Korea-linked cybercrime organization, has intensified its operations against financial and cryptocurrency sectors using a sophisticated fileless Remote Access Trojan (RAT) called RemotePE.…

  12 articles · Updated May 25, 2026

Recent Intelligence Reports

• "Wp2shell: Critical WordPress Gap Allows Code Insertion via API — www.heise.de · July 19, 2026
• Cloudflare Has Urgently Deployed Cloud-Based WAF Rules to Block Attacks Targeting the High-Risk Remote Code Execution Vulnerability in WordPress. — unsafe.sh · July 18, 2026
• Cloudflare WAF Protects WordPress Applications From Two High — Ground.News · July 18, 2026
• "WP2Shell" Critical WordPress RCE Chain (CVE-2026-63030 & CVE-2026-60137) Beazley Security Labs Advisories and Articles / 6h Beazley Security strongly recommends organizations apply available patches immediately, or deploy mitigations such as WAF rules. WordPress made patches available before public disclosure, and Cloudflare simultaneously released Web Application Firewall (WAF) protections for sites behind its service. — labs.beazley.security · July 18, 2026
• Anthropic's Eugene Yan: AI Can Find 20× More Software Bugs. The Real Crisis Is What ... — Finance.Biggo · July 18, 2026
• Critical wp2shell vulnerability enables unauthenticated RCE in WordPress core — Feeds.4Sysops · July 18, 2026
• Using LLMs to Secure Source Code — Eugene Yan, Anthropic｜AI Engineer — Finance.Biggo · July 18, 2026
• Declassified Intelligence and Electoral Vulnerability: A Rig — Weddings.Lavenderhotels · July 18, 2026

Related Entities