Unrated severityNVD Advisory· Published Jul 21, 2026· Updated Jul 22, 2026
Blind SQL Injection
CVE-2026-64880
Description
Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.