CVE-2026-66659 is a critical SQL Injection vulnerability in Essekia Tablesome Table affecting versions up to 1.2.9. The vulnerability arises from improper neutralization of special elements used in SQL commands, enabling blind SQL injection attacks. The CVSS 3.1 score is 9.3 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L), indicating network exploitable, low attack complexity, no privileges or user interaction required, with a scope change and high confidentiality impact but no integrity impact and low availability impact. No known exploits in the wild or vendor patch information is provided.

Successful exploitation allows an unauthenticated attacker to perform blind SQL injection attacks remotely, potentially exposing sensitive data (high confidentiality impact). The vulnerability does not affect data integrity but may cause limited availability impact. The scope is changed, meaning the vulnerability affects resources beyond the initially vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider applying input validation and sanitization controls at the application or database layer to mitigate SQL injection risks.