CVE-2026-49079

CriticalCVSS 9.3/10Last modified Jun 17, 2026

Description

Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions.

Metrics

CVSS 3.1 9.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jun 17, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-49089.8A security flaw has been discovered in code-projects Simple Laundry System 1.0. This affects an unknown function of the file /modstaffinfo.pCVE-2026-490809.3Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions.CVE-2026-490818.2Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.12 versions.CVE-2026-490827.4Subscriber Sensitive Data Exposure in Chatway Live Chat &#8211; AI Chatbot, Customer Support, FAQ &amp; Helpdesk Customer Service &amp; ChatCVE-2026-490837.5Contributor Privilege Escalation in LatePoint <= 5.5.1 versions.CVE-2026-490849.3Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions.CVE-2026-490859.8Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions.CVE-2026-490866.5Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apache Camel DAPR component. The camel-dapCVE-2026-490876.5Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130CVE-2026-490884.4Insertion of Sensitive Information into Log File (CWE-532) in Kibana can lead to information disclosure. When the optional application perfoCVE-2026-490896.5Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130).CVE-2026-49092.4A weakness has been identified in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/update_s7.php.
CVE-2026-49079: Critical severity, CVSS 9.3 | Vulnix