PT-2026-65803
CVE-2026-65890
·
Published
2026-07-29
·
Updated
2026-07-29
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Gridbox versions prior to 2.20.2
Description
Multiple SQL injection vectors allow unauthenticated actors to inject SQL in queries. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.
Recommendations
Update Gridbox to version 2.20.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾