ThreatVectr
Tag

#SQL Injection

11 stories taggedSQL Injection.

Illustration: a dimly lit server rack in a corporate data centre
Vulnerabilities

A critical flaw in Arista's VeloCloud Orchestrator is being exploited in the wild

CISA has added CVE-2026-114625, a SQL injection bug in Arista's VeloCloud Orchestrator, to its must-patch list after seeing it used in real attacks.

4 min read
Illustration: a dimly lit server room aisle in a Japanese data centre, cool blue status LEDs reflecting off polished floor
Vulnerabilities

Japan's data leak surge points at mobile app APIs and unpatched Metabase

JPCERT/CC says attackers are hitting mobile app back ends and known software flaws. A fresh Metabase advisory names the kind of bug being abused.

4 min read
Illustration for the story: Six Critical Flaws in Adobe Connect Could Let Attackers Take Over Accounts
Vulnerabilities

Six Critical Flaws in Adobe Connect Could Let Attackers Take Over Accounts

Two of the worst bugs require no action from the victim. Adobe wants patches applied within 30 days, but one score of 9.9 makes that window feel generous.

3 min read
A WordPress admin dashboard with a backup restoration dialog box highlighted, surrounded by warning indicators and database server racks in the background
Vulnerabilities

WordPress backup plugin hole leaves 3.25 million sites open to hijack

A flaw in All-in-One WP Migration and Backup lets unauthenticated attackers plant SQL that fires when an admin restores a backup, handing over full control of the site.

4 min read
A business telephone system data center with Sangoma equipment racks, security alerts visible on monitoring stations indicating unauthorized code execution atte
Vulnerabilities

Hackers Are Breaking Into Switchvox Phone Systems Through a Critical Flaw

A severe bug in Sangoma's business phone platform lets attackers run code on servers without a password. Exploitation is already happening.

3 min read
A network operations center with multiple large displays showing Cisco infrastructure components and security dashboards with critical alert notifications highl
Vulnerabilities

Cisco Patches Four Maximum-Severity Flaws in Crosswork Network Software

Fifteen vulnerabilities fixed across Cisco products, with three scoring a perfect 10 out of 10 on the standard severity scale. None are known to be exploited yet.

3 min read
A security analyst's workstation displaying attack traffic logs and map software vulnerability alerts in real-time, network packets visible crossing between sys
Vulnerabilities

Hackers Are Already Probing a Dangerous, Unpatched Flaw in GeoServer

A newly public security hole in popular mapping software drew hundreds of attack attempts within hours. No fix exists yet.

3 min read
A business analytics dashboard on a computer screen being overlaid with shadowy hands reaching through the monitor to grab data files and user records
Vulnerabilities

Metabase Zero-Day Turns Dashboards Into Data Heists at Framework and Tally

A critical flaw in the popular analytics tool let attackers walk in as admin. Customer names, emails and password hashes were taken before anyone knew the hole existed.

4 min read
A database administration interface showing SQL queries and command execution windows, with files and sensitive data visible in the background, illustrating how
Threat Intelligence

Hackers hid their attack tools inside an Oracle database itself

A rarely seen technique let intruders run commands, steal password data and browse files from within the database, after breaking in through a sloppy search box.

4 min read
A hosting control panel on a computer screen showing database management interfaces, with visual indicators highlighting the boundary between user-level account
Vulnerabilities

cPanel patches critical database flaw that let hosting customers run SQL as root

A newly disclosed bug, CVE-2026-58048, crossed the line between a single hosting account and the server's master database identity. cPanel has shipped a targeted fix.

3 min read
A WordPress website dashboard under active attack, with visual indicators of exploit attempts and unauthorized commands being executed, warning panels and secur
Vulnerabilities

WP2Shell: Two WordPress Flaws Are Being Exploited Right Now, and Millions of Sites Are at Risk

A pair of newly patched security holes in WordPress are already being used in live attacks. No login required. No special setup needed. Just a vulnerable website.

3 min read
© 2026 Threat Vectr