Threats tagged 'ghsa-3jw6-7g67-2vjx'

CVE-2026-61996 is a SQL Injection vulnerability affecting MLS On The Fly versions up to and including 1.8.1.5. This flaw allows an attacker with low privileges and no user interaction to execute unauthorized SQL queries, potentially leading to high confidentiality impact and limited availability impact. The vulnerability is rated high severity with a CVSS score of 8.5.