High severity7.1NVD Advisory· Published Jul 21, 2026· Updated Aug 18, 2026
CVE-2026-64880
CVE-2026-64880
Description
Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
1- www.tenable.com/security/tns-2026-19nvdPatchThird Party Advisory
News mentions
0No linked articles in our index yet.