PT-2026-48418

CVE-2026-52758

Published

2026-06-10

Updated

2026-06-11

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 12.1

Description BSim filter types concatenate user-supplied values directly into SQL queries without escaping or parameterization, leading to a SQL injection. This allows remote attackers to inject arbitrary SQL via the BSim network query protocol to read, modify, or delete data within the PostgreSQL database.

Recommendations Update to version 12.1 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Sean Nejad

Vendors

Affected products

Weakness enumeration

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')

Related identifiers