PT-2026-73072 · Evergreen · Evergreen

Hacklantic

·

CVE-2026-19926

·

Published

2026-08-16

·

Updated

2026-08-18

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Evergreen versions prior to 3.14.12 Evergreen versions prior to 3.15.12 Evergreen versions prior to 3.16.6 Evergreen versions prior to 3.17-beta2
Description A remote SQL injection exists within the open-ils.fielder OpenSRF Service, specifically affecting a function in the /osrf-gateway-v1 file. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database.
Recommendations Upgrade to version 3.14.12. Upgrade to version 3.15.12. Upgrade to version 3.16.6. Upgrade to version 3.17-beta2.

Exploit

Fix

SQL injection

Special Elements Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89CWE-74

Related Identifiers

CVE-2026-19926

Affected Products

Evergreen