Veille CVE

Mercredi 12 août 2026

2 CVE

Critique 0 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « SQLite » ✕
  1. CVE-2026-73331 7.1 Élevée

    owen2345 CamaleonCMS

    CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated attackers with post creation or editing privileges to submit a crafted slug value containing SQL syntax that the database backend evaluates as part of an inadequately parameterized query. Attackers can supply malicious slug payloads using boolean- or union-style blind SQL injection techniques to extract sensitive data from the underlying SQLite database, including administrative credentials and configuration values stored in application tables.

  2. CVE-2025-41771 4.3 Moyenne

    Phoenix Contact AXC F 1152 · Phoenix Contact AXC F 1252 · Phoenix Contact AXC F 2000 EA · Phoenix Contact AXC F 2152

    An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. The vulnerability affects a SQLite database used only for storing notification messages. Therefore, the impact is limited to the system’s notification functionality.