OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-66619

HIGH · CVSS 7.6 EPSS 0.38%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability allows for SQL injection in the Newsletters application versions 4.18 and earlier, potentially enabling attackers to manipulate database queries and access sensitive information. Organizations using affected versions should prioritize patching this issue to mitigate the risk of data breaches and unauthorized access. Immediate attention is recommended for system administrators and security teams managing these applications.

CVE
CVE-2026-66619
Severity
HIGH
CVSS
7.6
EPSS
0.38%

Original NVD Description

Administrator SQL Injection in Newsletters <= 4.18 versions.