high
advisory
Crocoblock JetEngine: SQL injection (CVE-2026-115608)
The Crocoblock JetEngine plugin is affected by an Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability in versions up to 3.9.0.
CVE search metadata
CVE search record: CVE-2026-115608. Severity: high. CVSS: 8.5. KEV: no. Product: JetEngine (n/a through 3.9.0). Brief: Crocoblock JetEngine: SQL injection (CVE-2026-115608). Brief link: https://feed.craftedsignal.io/briefs/2026-10-crocoblock-jetengine-sql-injection/
Triage facts
Revision 1- Applicability
- JetEngine (n/a through 3.9.0)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Oct 26, 11:41 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Crocoblock JetEngine plugin is affected by an SQL Injection vulnerability, identified as CVE-2026-115608. This issue arises from improper neutralization of special elements used in an SQL command and affects versions up to 3.9.0.