CVE ID :CVE-2026-119418 Published : Oct. 30, 2026, 11:30 a.m. | 29 minutes ago Description :CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated frame offsets and directions to WindowExpression::range() and frame()....

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-119418 - CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()

VERWANDTEARTIKEL

Critical Drupal Commerce Vulnerability Could Let Hackers Buy Products for Just $0.01

CVE-2026-91913 - Dell OpenManage Enterprise OS Command Injection Vulnerability

CVE-2026-91917 - Dell OpenManage Enterprise Improper Input Validation Vulnerability

CVE-2026-75882 - Improper access control vulnerability in ESET Encryption products for Windows

CVE-2026-119597 - OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgery

CVE-2026-119572 - Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider