Skip to content

CVE record · 1 source

CVE-2026-123491

CVSS 8.2

Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an SQL injection vulnerability in GraphQL eager-loading: arguments on eager-loadable…

Vendor: Craftcms
Product: cms
CVSS v3.1: 8.2 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Weakness: CWE-89
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

30

CVE NVD 3h ago

Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an SQL injection vulnerability in GraphQL eager-loading: arguments on eager-loadable…

Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an SQL injection vulnerability in GraphQL eager-loading: arguments on eager-loadable nodes absent from the public schema are copied into EagerLoadPlan criteria…

CVSS 8.2 CVE-2026-123491 Craftcms