Threats Tagged 'cve-2026-25236'
View all threats tagged with 'cve-2026-25236'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-25236'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-25236 is a medium-severity SQL injection vulnerability affecting pearweb versions prior to 1.33.0. The flaw arises from improper neutralization of special elements in SQL commands, specifically unsafe literal substitution in karma queries for an IN (... ) list. This vulnerability allows an unauthenticated attacker to execute arbitrary SQL queries remotely without user interaction, potentially leading to limited data integrity impact. The issue has been patched in version 1.33.0. Although no known exploits are currently reported in the wild, organizations using vulnerable pearweb versions should prioritize updating to mitigate risk. Join the discussion | CVE Database V5 | 02/03/2026, 18:29:46 UTC Added: 02/03/2026, 19:00:10 UTC |
Showing 1 to 1 of 1 result