Medium severity6.5NVD Advisory· Published Nov 3, 2026· Updated Nov 3, 2026

CVE-2026-110265

Description

A specially crafted malformed search query could return results from outside a user's organization. Log analysis of runZero's hosted environment found only testing of the issue and no adversary traffic. This issue was fixed in version 5.1.261013.1.

Affected products

Runzero/runZero Searchllm-fuzzy
Range: >=5.1.261013.1

Patches

Vulnerability mechanics

References

help.runzero.com/docs/release-notes/nvd
www.runzero.com/advisories/runzero-search-sqli-cve-2026-110265nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000