Threats tagged 'ghsa-c5j9-wg96-mpvw'

CVE-2026-7672 is a SQL injection vulnerability in youlaitech youlai-boot versions up to 2.21.1 affecting the getUserList function in the Users Endpoint. The vulnerability arises from manipulation of argument order, allowing remote attackers to execute SQL injection attacks. The vulnerability has a medium severity score of 6.3 and has been publicly disclosed with exploit code available. The vendor has not responded to the disclosure and no patch information is currently available.