Threats Tagged 'cve-2026-101046'
View all threats tagged with 'cve-2026-101046'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-101046'
Click on any threat for detailed analysis and mitigation recommendations
0 Fleet versions prior to 4.89.0 contain an SQL injection vulnerability in the activity list endpoints. This vulnerability allows an authenticated user with read access to the Activity resource to influence the SQL ORDER BY clause via a sort/order key without proper allowlisting. The impact is limited to read-only inference of certain columns in the activity_past table that are not normally exposed. There is no write access, privilege escalation, or access to sensitive host-related data through this flaw. The issue is fixed in version 4.89.0 by removing the deprecated helper and sanitizing the sort column input. Join the discussion | CVE Database V5 | 09/27/2026, 17:02:35 UTC Added: 09/28/2026, 01:57:40 UTC |
Showing 1 to 1 of 1 result