CVE ID :CVE-2026-110895 Published : Oct. 18, 2026, 11:16 a.m. | 45 minutes ago Description :Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems Support Genix support-genix-lite allows SQL Injection.This issue affects Support Genix:...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-110895 - WordPress Support Genix plugin <= 1.4.54 - SQL Injection vulnerability

VERWANDTEARTIKEL

Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root

CVE-2026-112051 - Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registration

CVE-2026-112021 - snac2 before 2.93 Heap-Based Buffer Overflow via JSON Parser _xs_json_load_lexer()

CVE-2026-112001 - ProjectSend 2.0.0 before 2.7.0 Incorrect Authorization via Users API Token Abilities

CVE-2026-112005 - WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor

CVE-2026-112006 - OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 Improper Certificate Validation