Technology ❯ Cybersecurity ❯ Vulnerabilities

SQL Injection

Metabase Aviation Security FlyCASS CVE-2020-12271 WordPress Plugins Ghost CMS LiteLLM Roundcube Webmail Drupal CVE-2026-26980 Data Theft CVE-2026-76461 Fortinet FortiClient EMS FortiClientEMS CVE-2026-21643 CVE-2026-9082 Remote Code Execution FortiDDoS-F and FortiClientEMS CVE-2026-42208 Cloud Security CVE-2026-44172 Digital Education Systems CVE-2026-9586 Oracle Database CVE-2026-60137 GeoServer WordPress Security CVE-2026-20282 CVE-2026-114625

Arista Patches Critical VeloCloud SQL Injection Zero‑Day

Exploitable by low‑privilege logins, the flaw can grant operator access to VeloCloud Orchestrator.

Cisco Issues Emergency Patch for Maximum‑Severity ISE Zero‑Day

Critical Cisco Email‑Gateway Zero‑Day Lets Attackers Gain Root

Second‑Order SQL Flaw in Popular WordPress Migration Plugin Leaves Millions Exposed

Attackers Actively Exploiting Critical Sangoma Switchvox SQL Injection

GeoServer Zero-Day SQL Injection Draws Mass Probes

Critical Metabase SQL Injection Exploited to Steal Customer Data

Metabase Zero‑Day SQL Injection Exploited to Steal Customer Data

SQL Injection Used to Compile Khunt Toolkit Inside Oracle Database

Hackers Exploiting WP2Shell Chain to Take Over Unpatched WordPress Sites

Attackers Poison More Than 700 Ghost CMS Sites to Push ClickFix Malware

Active Exploits Hit Drupal SQL Injection Flaw CVE-2026-9082

Hackers Exploit Critical LiteLLM SQL Injection Within 36 Hours of Advisory

Fortinet Releases Fixes for Critical FortiSandbox Flaws That Need No Login

Fortinet FortiClient EMS CVE-2026-21643 Now Under Active Exploitation

Ally WordPress Plugin SQL Injection Leaves Hundreds of Thousands of Sites at Risk