CVE ID :CVE-2026-115331 Published : Oct. 22, 2026, 11:17 a.m. | 49 minutes ago Description :Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric property_name or categorical filter values....

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-115331 - Lotus through 0.10.2 SQL Injection via Metric Property Names and Filters

VERWANDTEARTIKEL

CVE-2026-115330 - Lotus through 0.10.2 SQL Injection via Custom SQL Billable Metrics

CVE-2026-115332 - Lotus through 0.10.2 SQL Injection via Subscription Filter Keys

CVE-2026-115333 - Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix

CVE-2026-115324 - mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store

CVE-2026-115325 - Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup

CVE-2026-115328 - JSON-SCADA before 0.65-alpha SQL Injection via OPC HistoryRead API