Cybersecurity articles tagged #SQL Injection on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/mathspace-breach-over-1-million-impacted-by-metabase-zero-dayhttps://runtimerebel.com/blog/mathspace-breach-over-1-million-impacted-by-metabase-zero-dayMathspace disclosed a data breach affecting over 1 million students, staff, and parents due to a Metabase vulnerability.Mon, 07 Sep 2026 13:49:42 GMTData BreachSQL InjectionShinyHuntersZero-DayMathspacehttps://runtimerebel.com/blog/cve-2026-9586-sangoma-switchvox-rce-via-sql-injectionhttps://runtimerebel.com/blog/cve-2026-9586-sangoma-switchvox-rce-via-sql-injectionSangoma Switchvox is affected by CVE-2026-9586, an unauthenticated remote SQL injection vulnerability enabling RCE, with active exploitation confirmed.Wed, 02 Sep 2026 19:12:29 GMTCVE-2026-9586Sangoma SwitchvoxSQL InjectionRemote Code ExecutionCISA KEVhttps://runtimerebel.com/blog/shinyhunters-breaches-shipmonk-14000-trezor-customers-data-exposedhttps://runtimerebel.com/blog/shinyhunters-breaches-shipmonk-14000-trezor-customers-data-exposedShinyHunters group breached shipping provider ShipMonk, exposing personal data of 14,000 Trezor customers via a Metabase SQL injection vulnerability.Fri, 14 Aug 2026 09:00:29 GMTData BreachShinyHuntersSQL InjectionShipMonkTrezorhttps://runtimerebel.com/blog/cve-2026-72898-metabase-sql-injection-active-exploitationhttps://runtimerebel.com/blog/cve-2026-72898-metabase-sql-injection-active-exploitationCISA adds Metabase CVE-2026-72898 SQL injection to its KEV catalog, enabling unauthenticated remote attackers to gain admin access.Wed, 12 Aug 2026 01:08:08 GMTCVE-2026-72898MetabaseSQL InjectionCISA KEVRemote Code Executionhttps://runtimerebel.com/blog/metabase-zero-day-sql-vulnerability-threatens-analytics-platformshttps://runtimerebel.com/blog/metabase-zero-day-sql-vulnerability-threatens-analytics-platformsUnpatched Metabase business-analytics zero-day vulnerability allows remote administrative access and threatens downstream corporate networks.Tue, 11 Aug 2026 16:50:53 GMTMetabaseZero-DayRemote Code ExecutionSQL InjectionVulnerabilityhttps://runtimerebel.com/blog/metabase-zero-day-exploited-unauthenticated-admin-accesshttps://runtimerebel.com/blog/metabase-zero-day-exploited-unauthenticated-admin-accessMetabase zero-day vulnerability (CVSS 10.0) actively exploited, allowing unauthenticated remote attackers to gain admin access and steal data.Sat, 08 Aug 2026 08:28:26 GMTZero-DaySQL InjectionUnauthenticated AccessData BreachMetabasehttps://runtimerebel.com/blog/metabase-sqli-zero-day-exploited-data-theft-attacks-confirmedhttps://runtimerebel.com/blog/metabase-sqli-zero-day-exploited-data-theft-attacks-confirmedA critical Metabase SQL injection zero-day vulnerability (versions 1.58+) has been exploited in data theft attacks affecting customers like Framework and Tally.Sat, 08 Aug 2026 00:54:50 GMTSQL InjectionZero-DayData BreachMetabaseFrameworkhttps://runtimerebel.com/blog/khunt-toolkit-leverages-sqli-in-oracle-for-system-accesshttps://runtimerebel.com/blog/khunt-toolkit-leverages-sqli-in-oracle-for-system-accessAttackers exploit SQL injection in a public-facing web app to compile the khunt toolkit within Oracle, achieving SYSTEM-level access on Windows servers.Thu, 06 Aug 2026 10:29:03 GMTSQL InjectionPost ExploitationWindowsOracle DatabaseKhunthttps://runtimerebel.com/blog/cve-2026-58048-cpanel-whm-critical-sql-privilege-escalationhttps://runtimerebel.com/blog/cve-2026-58048-cpanel-whm-critical-sql-privilege-escalationA critical flaw in cPanel & WHM (CVE-2026-58048) allows authenticated users to execute SQL as database root, potentially leading to OS-level compromise.Tue, 04 Aug 2026 11:21:13 GMTcPanelSQL InjectionPrivilege EscalationWeb HostingWHMhttps://runtimerebel.com/blog/cve-2026-60137-wordpress-core-sql-injection-to-rce-patch-nowhttps://runtimerebel.com/blog/cve-2026-60137-wordpress-core-sql-injection-to-rce-patch-nowCISA warns of active exploitation for CVE-2026-60137, a WordPress Core SQL Injection vulnerability chaining to RCE for unauthenticated attackers.Sun, 02 Aug 2026 02:55:48 GMTWordPressSQL InjectionRCECISA KEVCVE-2026-60137https://runtimerebel.com/blog/cve-2026-63030-wordpress-core-sqli-leads-to-unauth-rcehttps://runtimerebel.com/blog/cve-2026-63030-wordpress-core-sqli-leads-to-unauth-rceCritical SQL injection vulnerability (CVE-2026-63030) in WordPress Core enables unauthenticated remote code execution. Active exploitation confirmed.Mon, 20 Jul 2026 21:15:06 GMTCVE-2026-63030WordPressSQL InjectionRCEWp2shellhttps://runtimerebel.com/blog/critical-rces-fortinac-cve-2023-33300-sonicwall-sma-zero-dayhttps://runtimerebel.com/blog/critical-rces-fortinac-cve-2023-33300-sonicwall-sma-zero-dayTwo critical vulnerabilities, FortiNAC RCEs (CVE-2023-33300, CVE-2023-33299) and a SonicWall SMA zero-day SQLi, require immediate patching and mitigation.Tue, 07 Jul 2026 03:34:45 GMTCVE-2023-33300CVE-2023-33299CVE-2023-34124Fortinet FortiNACSonicWall SMA 100RCESQL InjectionZero-Dayhttps://runtimerebel.com/blog/siemens-kaco-blueplanet-inverter-vulnerabilities-cve-2025-40946-cve-2026-41125https://runtimerebel.com/blog/siemens-kaco-blueplanet-inverter-vulnerabilities-cve-2025-40946-cve-2026-41125Critical Siemens KACO Blueplanet Inverters are vulnerable to credential derivation (CVE-2025-40946) and SQL injection (CVE-2026-41125).Tue, 09 Jun 2026 17:02:56 GMTSiemensKACO Blueplanet InvertersICSEnergy SectorCVE-2025-40946CVE-2026-41125Hard Coded KeySQL InjectionOperational Technologyhttps://runtimerebel.com/blog/hardening-automatic-tank-gauge-systems-against-cyber-threatshttps://runtimerebel.com/blog/hardening-automatic-tank-gauge-systems-against-cyber-threatsCISA and partners warn of active cyber threats targeting Automatic Tank Gauge (ATG) systems. Learn to secure critical infrastructure assets now.Tue, 02 Jun 2026 21:12:50 GMTATG SystemsOperational TechnologyICS SecurityCritical InfrastructureCISA AdvisoryCyber Threat ActorsAuthentication BypassPrivilege EscalationSQL Injectionhttps://runtimerebel.com/blog/cve-2023-48788-critical-forticlient-ems-rce-under-active-exploitationhttps://runtimerebel.com/blog/cve-2023-48788-critical-forticlient-ems-rce-under-active-exploitationExploitation of CVE-2023-48788 in FortiClient EMS allows unauthenticated remote code execution. Administrators must patch to version 7.2.3 or 7.0.11 immediately.Thu, 28 May 2026 13:26:51 GMTFortinetCVE-2023-48788RCEFortiClient EMSSQL Injectionhttps://runtimerebel.com/blog/drupal-7-x-sql-injection-cve-2014-3704-active-exploitation-alerthttps://runtimerebel.com/blog/drupal-7-x-sql-injection-cve-2014-3704-active-exploitation-alertCISA adds Drupalgeddon SQL injection (CVE-2014-3704) to KEV catalog, mandating federal agencies to patch critical legacy systems against active exploits.Tue, 26 May 2026 09:19:03 GMTCVE-2014-3704DrupalSQL InjectionCISA KEVhttps://runtimerebel.com/blog/cve-2026-26980-ghost-cms-sql-injection-leads-to-clickfix-attackshttps://runtimerebel.com/blog/cve-2026-26980-ghost-cms-sql-injection-leads-to-clickfix-attacksAttackers exploit CVE-2026-26980 in Ghost CMS to compromise 700+ websites, deploying ClickFix malware that tricks users into executing malicious scripts.Mon, 25 May 2026 13:16:58 GMTCVE-2026-26980Ghost CMSSQL InjectionClickFixMalwarehttps://runtimerebel.com/blog/cve-2025-26980-ghost-cms-sql-injection-exploited-in-clickfix-campaignhttps://runtimerebel.com/blog/cve-2025-26980-ghost-cms-sql-injection-exploited-in-clickfix-campaignA critical SQL injection vulnerability in Ghost CMS (CVE-2025-26980) is being exploited to deliver ClickFix malware through malicious JavaScript injections.Sun, 24 May 2026 16:26:15 GMTGhost CMSCVE-2025-26980SQL InjectionClickFixMalware Campaignhttps://runtimerebel.com/blog/cve-2026-9082-drupal-core-sql-injection-added-to-cisa-kev-cataloghttps://runtimerebel.com/blog/cve-2026-9082-drupal-core-sql-injection-added-to-cisa-kev-catalogCISA warns of active exploitation of CVE-2026-9082, a critical SQL injection vulnerability in Drupal Core. Organizations must patch to prevent data exposure.Sat, 23 May 2026 08:47:48 GMTCVE-2026-9082DrupalSQL InjectionCISA KEVCMS Securityhttps://runtimerebel.com/blog/cve-2026-9082-drupal-core-sql-injection-under-active-exploitationhttps://runtimerebel.com/blog/cve-2026-9082-drupal-core-sql-injection-under-active-exploitationCISA adds CVE-2026-9082, a critical Drupal Core SQL Injection vulnerability, to KEV Catalog due to active exploitation. Immediate patching required for all organizations.Sat, 23 May 2026 00:55:48 GMTCVE-2026-9082DrupalSQL InjectionCISA KEV CatalogActive Exploitationhttps://runtimerebel.com/blog/cve-2024-2123-cve-2024-2510-avada-builder-patch-guidancehttps://runtimerebel.com/blog/cve-2024-2123-cve-2024-2510-avada-builder-patch-guidanceCritical flaws in Avada Builder WordPress plugin (CVE-2024-2123, CVE-2024-2510) allow for credential theft and LFI. Immediate update to version 3.11.7 required.Fri, 15 May 2026 16:41:00 GMTCVE-2024-2123CVE-2024-2510Avada BuilderWordPress SecuritySQL Injectionhttps://runtimerebel.com/blog/cve-2026-42208-berriai-litellm-sqli-exploitation-patch-nowhttps://runtimerebel.com/blog/cve-2026-42208-berriai-litellm-sqli-exploitation-patch-nowCISA adds CVE-2026-42208, a critical SQL injection vulnerability in BerriAI LiteLLM, to KEV catalog. Active exploitation confirmed.Fri, 08 May 2026 20:28:32 GMTCVE-2026-42208BerriAI LiteLLMSQL InjectionCISA KEVVulnerability Managementhttps://runtimerebel.com/blog/cve-2026-42208-active-exploitation-of-litellm-sql-injectionhttps://runtimerebel.com/blog/cve-2026-42208-active-exploitation-of-litellm-sql-injectionAttackers are actively exploiting CVE-2026-42208, a critical SQL injection flaw in LiteLLM, within 36 hours of disclosure. Patch to prevent database compromise.Wed, 29 Apr 2026 08:52:44 GMTCVE-2026-42208LiteLLMBerriAISQL Injectionhttps://runtimerebel.com/blog/cve-2026-42208-litellm-pre-auth-sqli-actively-exploited-patch-nowhttps://runtimerebel.com/blog/cve-2026-42208-litellm-pre-auth-sqli-actively-exploited-patch-nowHackers are actively exploiting CVE-2026-42208, a critical pre-authentication SQL injection vulnerability in LiteLLM, to access sensitive data.Wed, 29 Apr 2026 00:51:59 GMTCVE-2026-42208LiteLLMSQL InjectionPre AuthenticationLLM Gatewayhttps://runtimerebel.com/blog/critical-rce-threats-confluence-ognl-exchange-server-patchinghttps://runtimerebel.com/blog/critical-rce-threats-confluence-ognl-exchange-server-patchingRuntime Rebel analyzes critical RCE vulnerabilities affecting Atlassian Confluence and Microsoft Exchange Server, alongside a high-severity SQLi in WP Reset.Thu, 23 Apr 2026 05:06:17 GMTAtlassian ConfluenceOGNL InjectionRCEMicrosoft Exchange ServerPatch TuesdayWordPressWP ResetSQL InjectionVulnerabilityhttps://runtimerebel.com/blog/sap-cve-2026-27681-critical-sql-injection-vulnerability-patch-guidancehttps://runtimerebel.com/blog/sap-cve-2026-27681-critical-sql-injection-vulnerability-patch-guidanceApril Patch Tuesday addresses a critical 9.9 CVSS SQL injection vulnerability in SAP Business Warehouse and updates for Microsoft, Adobe, and Fortinet.Wed, 15 Apr 2026 16:28:18 GMTCVE-2026-27681SAPPatch TuesdaySQL InjectionMicrosoftFortinethttps://runtimerebel.com/blog/cisa-kev-update-fortinet-forticlient-ems-cve-2026-21643-under-attackhttps://runtimerebel.com/blog/cisa-kev-update-fortinet-forticlient-ems-cve-2026-21643-under-attackCISA adds six flaws to the KEV catalog, including a critical unauthenticated SQL injection in Fortinet FortiClient EMS (CVE-2026-21643). Patch immediately.Tue, 14 Apr 2026 08:40:46 GMTFortinetCVE-2026-21643CISA KEVSQL InjectionFortiClient EMShttps://runtimerebel.com/blog/cisa-kev-update-exchange-server-adobe-ms-windows-exploitshttps://runtimerebel.com/blog/cisa-kev-update-exchange-server-adobe-ms-windows-exploitsCISA adds seven vulnerabilities, including critical Microsoft Exchange Server deserialization, to its Known Exploited Vulnerabilities Catalog, urging immediate…Tue, 14 Apr 2026 00:47:03 GMTCVE-2012-1854CVE-2020-9715CVE-2023-21529CVE-2023-36424CVE-2025-60710CVE-2026-21643CVE-2026-34621Microsoft Exchange ServerAdobe AcrobatMicrosoft WindowsFortinetCISAKEV CatalogDeserializationUse After FreeSQL Injectionhttps://runtimerebel.com/blog/forticlient-ems-rce-via-cve-2023-48788-patch-guidancehttps://runtimerebel.com/blog/forticlient-ems-rce-via-cve-2023-48788-patch-guidanceCISA mandates federal agencies patch the critical FortiClient EMS SQL injection flaw, CVE-2023-48788, which allows unauthenticated remote code execution.Mon, 06 Apr 2026 16:21:26 GMTCVE-2023-48788FortinetCISARCESQL Injectionhttps://runtimerebel.com/blog/fortinet-forticlient-ems-critical-sqli-flaw-under-active-exploitationhttps://runtimerebel.com/blog/fortinet-forticlient-ems-critical-sqli-flaw-under-active-exploitationCritical SQL injection in FortiClient EMS allows unauthenticated remote code execution. Active exploitation detected, immediate patching required.Tue, 31 Mar 2026 12:31:11 GMTFortinetFortiClient EMSSQL InjectionRCEExploitationhttps://runtimerebel.com/blog/cve-2023-48788-forticlient-ems-rce-via-sql-injection-exploithttps://runtimerebel.com/blog/cve-2023-48788-forticlient-ems-rce-via-sql-injection-exploitExploitation of a critical RCE vulnerability (CVE-2023-48788) in Fortinet FortiClient EMS has been confirmed. Learn how to detect and mitigate this threat.Mon, 30 Mar 2026 08:40:09 GMTCVE-2023-48788FortinetFortiClient EMSRCESQL Injectionhttps://runtimerebel.com/blog/elementor-ally-plugin-sqli-unauthenticated-data-theft-riskhttps://runtimerebel.com/blog/elementor-ally-plugin-sqli-unauthenticated-data-theft-riskAn unauthenticated SQL injection vulnerability in the Elementor Ally WordPress plugin affects over 400,000 sites, risking sensitive data exposure.Wed, 11 Mar 2026 20:13:50 GMTSQL InjectionWordPressElementor AllyWeb AccessibilityData Thefthttps://runtimerebel.com/blog/leakylooker-google-looker-studio-cross-tenant-sql-vulnerabilitieshttps://runtimerebel.com/blog/leakylooker-google-looker-studio-cross-tenant-sql-vulnerabilitiesDiscover how nine vulnerabilities in Google Looker Studio, dubbed LeakyLooker, allowed cross-tenant SQL queries and sensitive data exfiltration in GCP.Tue, 10 Mar 2026 16:27:19 GMTGoogle Looker StudioLeakyLookerGCP SecuritySQL InjectionCross TenantTenablehttps://runtimerebel.com/blog/ivanti-epm-cve-2024-29824-exploited-technical-analysis-and-patchinghttps://runtimerebel.com/blog/ivanti-epm-cve-2024-29824-exploited-technical-analysis-and-patchingCISA warns of active exploitation of CVE-2024-29824 in Ivanti Endpoint Manager. Secure your Core server with our technical analysis and mitigation guide.Tue, 10 Mar 2026 12:19:43 GMTCVE-2024-29824IvantiEndpoint ManagerCISA KEVRCESQL Injectionhttps://runtimerebel.com/blog/critical-rce-flaws-in-insat-masterscada-buk-ts-affect-icshttps://runtimerebel.com/blog/critical-rce-flaws-in-insat-masterscada-buk-ts-affect-icsTwo critical vulnerabilities (SQLi, OS Command Injection) in InSAT MasterSCADA BUK-TS lead to remote code execution, impacting critical infrastructure sectors globally.Wed, 25 Feb 2026 04:43:53 GMTCVE-2026-21410CVE-2026-22553InSAT MasterSCADA BUK TSSQL InjectionOS Command InjectionRCEICSSCADACritical ManufacturingEnergyWater and Wastewater