CVE-2026-79752criticalCWE-89

CVE-2026-79752: fallo crítico en cakephp

CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection

Publicada el

Seguir esta CVE+ Monitorear cakephp+ Monitorear cakephp/cakephp

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

48Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 9.2epss 0.6%
de la publicación al arma2 días
Publicada en NVD17 sept
1ª PoC+2d
CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit values and incorporate them into generated SQL as unescaped structural fragments. An application that passes untrusted input to these parameters can permit SQL injection with confidentiality, integrity, and availability impact according to the database connection's privileges. This issue is fixed in versions 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
cakephp · cakephp
PoCs públicas encontradas — 1
githubgithub.com/abraxas/CVE-2026-79752★ 0
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — cakephp

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-22727CRITICALDatabase Query::offset() and limit() vulnerable to SQL injection in cakephpEPSS 0.9%CVE-2026-77635CRITICALCakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriverEPSS 0.5%CVE-2026-119418CRITICALCakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()EPSS 0.5%CVE-2026-119417MEDIUMCakePHP through 5.4.3 Email Header Injection via Bare CR/LF in SmtpTransport and MailTransportEPSS 0.5%CVE-2026-119419CRITICALCakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression CollationEPSS 0.4%CVE-2026-119415MEDIUMCakePHP through 5.4.3 MIME Header Injection via FormDataPart Content-TypeEPSS 0.4%