HIGH 8.7 NVD

CVE-2026-2613

The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of SQL statements. A user with adm

The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of SQL statements. A user with administrator privileges can exploit this by influencing the structure of executed SQL statements, enabling blind SQL injection to infer database information and potentially impact the availability of the database service.

References

https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/W

Published: 2026-11-02 · Source: NVD · Feed updated: 2026-11-02

This high severity vulnerability with a CVSS score of 8.7 was published on 2026-11-02 via NVD.

vulnfeed aggregates 17991 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.