Threats Tagged 'cve-2026-29080'
View all threats tagged with 'cve-2026-29080'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-29080'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-vjr5-c9qv-hgm3: Rucio has SQL Injection in FilterEngine Oracle JSON Path via DID Search APICVE-2026-29080 0 A critical SQL injection vulnerability exists in Rucio's Oracle JSON path handling within the FilterEngine's DID search API. Authenticated users can inject arbitrary SQL via filter keys and values in the DID search endpoint when using the default json_meta plugin with Oracle backends. The vulnerability arises from unsafe string formatting of user input into raw SQL fragments without parameterization. This can lead to full database compromise including extraction of sensitive data such as authentication tokens and password hashes. The non-Oracle database backends are not affected due to safer query construction methods. Join the discussion | GCVE Database | 05/06/2026, 16:42:49 UTC Added: 06/30/2026, 23:36:15 UTC |
Showing 1 to 1 of 1 result