CVE-2026-64880

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries. This allows for blind SQL injection, a technique used to extract information from a database by asking true/false questions, leading to unauthorized database read access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.