CVE-2026-124265

Name of the Vulnerable Software and Affected Versions Tribulant Software Newsletters newsletters-lite versions prior to 4.18.1

Description An issue involving improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the database true or false questions and determines the answer based on the application's response.

Recommendations Update Tribulant Software Newsletters newsletters-lite to version 4.18.1 or later.