CVE-2026-118871 is an SQL injection vulnerability that allows attackers with login access to steal database information. The vulnerability is classified with a medium severity score of 6.5 and requires low privileges to exploit. No public exploits or patches are currently documented.