← Database

CVE-2026-115738

MEDIUM CVSS: 6.5 Published: 2026-11-05 Modified: 2026-11-05

Description

SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated attacker to inject SQL queries without sanitization or parameterized queries.

Affected Platforms

Unknown

Weakness Type

CWE-89

References