CWE-89

Everything Vuln Post has reported about CWE-89: 2 stories, newest first. Part of our Vulnerabilities coverage.

14 Oct
Vulnerabilities

WeGIA Critical SQL Injection CVE-2026-55684 Fixed in 3.8.6 Update for Charity Management App

LabRedesCefetRJ released version 3.8.6 to fix CVE-2026-55684, a CVSS 9.8 critical SQL injection vulnerability in the WeGIA charity management web application that allowed remote attackers to manipulate database records without authentication.

11 Oct
Vulnerabilities

Tickera Plugin: Critical Blind SQL Injection in v3.6.0.6 Risks Database Access

Security researchers identified a critical blind SQL injection flaw in Tickera versions up to 3.6.0.6, risking unauthorized database access and data exposure.