CVE-2026-39746

An unauthenticated SQL injection vulnerability exists in Booknetic versions up to 4.8.5, allowing attackers to execute arbitrary SQL queries on the database. This critical flaw can lead to unauthorized data access, data manipulation, or even complete system compromise. Organizations using affected versions should prioritize immediate patching to mitigate potential exploitation risks.