Cwe-89 - SQL Injection - Cwe

Related Threat Clusters

• Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation

  SonicWall has reported two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 Series appliances, which are currently being actively exploited. The first vulnerability, CVE-2026-15409, is…

  50 articles · Updated July 15, 2026
• Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild

  A critical command injection vulnerability, CVE-2026-42271, in LiteLLM, an open-source AI gateway, allows unauthenticated remote code execution (RCE) when chained with CVE-2026-48710, a Host header validation bypass in…

  17 articles · Updated June 9, 2026
• Critical SQL Injection Vulnerability in NocoBase (CVE-2026-52887)

  CVE-2026-52887 is a critical SQL injection vulnerability affecting NocoBase, an AI-powered no-code/low-code platform. The flaw allows unauthenticated remote attackers to execute arbitrary SQL queries via the…

  2 articles · Updated July 16, 2026
• Lazarus Group Exploits Windows Zero-Day to Target Defense Sector

  The North Korean hacking group Lazarus exploited a zero-day vulnerability (CVE-2026-68820) in the Windows Ancillary Function Driver for WinSock (afd.sys) to gain SYSTEM-level access to defense sector systems. This…

  33 articles · Updated August 12, 2026
• Critical SQL Injection Vulnerability in Drupal Core Actively Exploited

  A critical SQL injection vulnerability (CVE-2026-9082) in Drupal Core has been identified, affecting multiple supported versions. The vulnerability, with a CVSS score of 9.8, allows unauthenticated attackers to execute…

  6 articles · Updated May 25, 2026
• Critical SQL Injection Vulnerability in GPTranslate Plugin (CVE-2026-49776)

  A critical unauthenticated SQL injection vulnerability (CVE-2026-49776) has been identified in the GPTranslate plugin for WordPress, affecting versions 2.32.6 and earlier. This flaw allows attackers to execute arbitrary…

  3 articles · Updated June 16, 2026
• CISA Warns of Critical Exploits in Langflow, Tomcat, and N-central Flaws

  CISA has added critical vulnerabilities in IBM Langflow, Apache Tomcat, and N-able N-central to its Known Exploited Vulnerabilities catalog, with a deadline for federal agencies to patch by August 7, 2026. The Langflow…

  2 articles · Updated August 7, 2026
• Head Mare Hackers Exploit TrueConf Vulnerabilities to Deploy Backdoors

  The Head Mare hacktivist group has breached TrueConf video conferencing servers, exploiting vulnerabilities to replace legitimate client installers with malicious versions containing backdoors. The attackers executed…

  23 articles · Updated August 8, 2026
• Critical SQL Injection Vulnerability Discovered in ReadyEcommerce (CVE-2026-63106)

  A critical unauthenticated SQL injection vulnerability, CVE-2026-63106, has been identified in ReadyEcommerce versions prior to 4.5.2. The flaw exists in the product listing API, where the rating parameter is…

  2 articles · Updated August 11, 2026
• Critical cPanel Vulnerability Exploited in Southeast Asia Cyber Attacks

  A sophisticated cyber campaign has exploited a critical cPanel vulnerability (CVE-2026-41940) to breach government and military servers in Southeast Asia, particularly targeting Indonesia. The attackers utilized a…

  3 articles · Updated May 4, 2026

Recent Intelligence Reports

• CWE-285: Improper Authorization — cwe.mitre.org · August 31, 2026
• ServiceNow patches three maximum severity flaws inside its AI agent platform — Startupfortune · August 30, 2026
• High-Severity MongoDB Driver and BI Connector Flaws Require Immediate Patching Mallory Threat Intelligence Stories / 7h CVE-2026-81532 was published as a high-severity improper-bounds-checking vulnerability in the BI Connector ODBC driver. MongoDB Connector for BI's CVE-2026-77586 was published as a high-severity flaw in which unescaped collection, field, or index names can inject SQL into generated SHOW CREATE output that is later replayed. — mallory.ai · August 29, 2026
• ServiceNow Patches Max-Severity AI Platform Flaws; Urgent Enterprise Action Needed — Techgig · August 29, 2026
• Inside A Multi Agent Ai Framework Used To Compromise Government Entities In Asia — www.dreamgroup.com · August 29, 2026
• CVE-2026-82329 - Exploits & Severity — Feedly · August 29, 2026
• ServiceNow patches three maximum severity flaws that could put enterprise data at risk — Csoonline · August 28, 2026
• PavinLoader Malware Spreads via ClickFix and Fake Download Campaigns — Technadu · August 25, 2026

Related Entities