CRITICAL 9.8 NVD
CVE-2026-72565
A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary dat
A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator.
References
- https://github.com/Tencent/APIJSON
- https://github.com/Tencent/APIJSON/blob/master/APIJSONORM/src/main/java/apijson/orm/Abstra
This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-08-10 via NVD.
Risk Timeline
CVE Disclosed2026-08-10 · -1 days ago
Remediation Resources
vulnfeed aggregates 9095 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.