CVE-2026-2613
HIGH
MEDIUM
Priority: 0.04
BB Relevance:
62/100
Published: 2026-11-02
Modified: 2026-11-02
First seen: 2026-11-02
Status: active
Attack Surface
Network
Low Complexity
No Interaction
Conf. Impact
Scope Change
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
High
UI:
None
S:
Changed
C:
High
I:
None
A:
High
Description
The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of SQL statements. A user with administrator privileges can exploit this by influencing the structure of executed SQL statements, enabling blind SQL injection to infer database information and potentially impact the availability of the database service.
Weakness Classification (1)
Affected Software (28)
References & Advisories (1)
vendor-advisory