CVE-2026-119418criticalCWE-89

CVE-2026-119418: fallo crítico en cakephp

CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()

Publicada el

Seguir esta CVE+ Monitorear cakephp

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.2epss 0.5%
CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated frame offsets and directions to WindowExpression::range() and frame(). Attackers can pass crafted values through applications forwarding user input into the OVER clause to execute SQL with the database connection's privileges.
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
cakephp · cakephp
CVEs relacionadas — cakephp

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-22727CRITICALDatabase Query::offset() and limit() vulnerable to SQL injection in cakephpEPSS 0.9%CVE-2026-79752CRITICALCakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injectionEPSS 0.6%CVE-2026-77634HIGHCakePHP: SmtpTransport vulnerable to CRLF header injectionEPSS 0.5%CVE-2026-77635CRITICALCakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriverEPSS 0.5%CVE-2026-119417MEDIUMCakePHP through 5.4.3 Email Header Injection via Bare CR/LF in SmtpTransport and MailTransportEPSS 0.5%CVE-2026-119419CRITICALCakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression CollationEPSS 0.4%