CVE-2026-123859 - SQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core)
CVE ID :CVE-2026-123859 Published : Nov. 6, 2026, 4:11 p.m. | 58 minutes ago Description :When identifier escaping is disabled through a non-default configuration, the write_pandas() data-loading functionality in the Snowflake Connector for Python and the Snowflake Connector for Python...