CVE-2026-52476 | CyberRota

CyberRota Analysis

AI-Generated

A SQL Injection vulnerability in the aiflowy application (versions 2.1.2 and earlier) allows remote attackers to exploit the getPageData method in the DatacenterQuery.java file, potentially leading to unauthorized access to sensitive information. Organizations using affected versions of Java should prioritize patching this vulnerability to mitigate the risk of data breaches.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE

CVE-2026-52476

Severity

HIGH

CVSS

7.5

EPSS

0.37%

Java

Original NVD Description

SQL Injection vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file