Skip to content
Threat Feed
Subscribe

Tag

Cakephp

1 brief RSS
high advisory

CakePHP: SQL injection in StringExpression and IdentifierExpression (CVE-2026-119419)

CakePHP through version 5.4.3 contains an SQL injection vulnerability in its query building components that allows unvalidated collation values to trigger arbitrary SQL execution.

CakePHP web-application-vulnerability sqli
1t 1c