CVE ID :CVE-2026-113605 Published : Oct. 20, 2026, 4:17 p.m. | 1 hour, 49 minutes ago Description :Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent() that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-113605 - Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database

VERWANDTEARTIKEL

CVE-2026-105772 - Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId

CVE-2026-28328 - SolarWinds Observability Self-Hosted broken authorization schema

CVE-2026-113682 - Networknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password

CVE-2026-113703 - SuggestArr before 3.0.0 Authentication Bypass via X-Forwarded-For Spoofing

CVE-2026-90800 - Apache CouchDB: Auth bypass in prefixed _users and _replicator databases

CVE-2026-113678 - Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron