MEDIUM 6.5 NVD
CVE-2026-110265
A specially crafted malformed search query could return results from outside a user's organization. Log analysis of runZero's hosted environment found only test
A specially crafted malformed search query could return results from outside a user's organization. Log analysis of runZero's hosted environment found only testing of the issue and no adversary traffic. This issue was fixed in version 5.1.261013.1.
References
- https://help.runzero.com/docs/release-notes/#512610131
- https://www.runzero.com/advisories/runzero-search-sqli-cve-2026-110265
This medium severity vulnerability with a CVSS score of 6.5 was published on 2026-11-03 via NVD.
vulnfeed aggregates 18261 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.