CVE-2026-88402 in Nocobase

Sumário

de MITRE • 22/09/2026

A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injecting crafted SQL statements.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsável: MITRE
• Reservar: 10/09/2026
• Divulgação: 22/09/2026
• Moderação: aceite
• Entrada: VDB-408296
• CPE: pronto
• CWE: CWE-89 (confirmado)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-88402
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-88402
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-88402/