Tribulant Software Newsletters SQL injection (CVE-2026-111402)
Tribulant Software Newsletters newsletters-lite contains an 'Improper Neutralization of Special Elements used in an SQL Command' (SQL Injection) vulnerability.
CVE search metadata
CVE search record: CVE-2026-111402. Severity: critical. CVSS: 9.3. KEV: no. Product: Newsletters (n/a through 4.18.1). Brief: Tribulant Software Newsletters SQL injection (CVE-2026-111402). Brief link: https://feed.craftedsignal.io/briefs/2026-10-tribulant-sqli/
Triage facts
Revision 2- Applicability
- Newsletters (n/a through 4.18.1)
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 2 public sources
- Freshness
- Revision 2Oct 24, 11:14 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Revision history 1 entry · Revision 2
- Revision 2
poc_available
Changed: has_poc, lastmod, poc_references, references, updates
Sources: 1
Tribulant Software Newsletters (newsletters-lite) is affected by an Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability. This issue affects Newsletters from n/a through 4.18.1.