CVE-2026-66770

Name of the Vulnerable Software and Affected Versions SAP Social intelligence (affected versions not specified)

Description An authenticated attacker can exploit an SQL Injection flaw to inject SQL DDL (Data Definition Language) strings directly into the underlying database without additional authorization. This allows for malicious modifications to the database structure, which may impact the confidentiality, integrity, and availability of the system. SQL DDL is a subset of SQL used to define and modify the structure of database objects.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.