CVE-2026-39771

The Buddyboss Platform versions up to 3.1.0 are vulnerable to a SQL Injection attack, which could allow an attacker to manipulate database queries and potentially access sensitive information. This high-severity vulnerability poses a significant risk to any organization using affected versions, particularly those managing user subscriptions or sensitive data. Organizations utilizing the Buddyboss Platform should prioritize immediate updates to mitigate potential exploitation.