CVE-2026-79752criticalCWE-89

CVE-2026-79752: falha crítica em cakephp

CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection

Publicada em

Seguir esta CVE+ Monitorar cakephp+ Monitorar cakephp/cakephp

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

48Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendcvss 9.2epss 0.6%
da publicação à arma2 dias
Publicada no NVD17 de set.
1ª PoC+2d
CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit values and incorporate them into generated SQL as unescaped structural fragments. An application that passes untrusted input to these parameters can permit SQL injection with confidentiality, integrity, and availability impact according to the database connection's privileges. This issue is fixed in versions 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
cakephp · cakephp
PoCs públicas encontradas — 1
githubgithub.com/abraxas/CVE-2026-79752★ 0
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — cakephp

No mesmo produto, das mais perigosas para as menos.

CVE-2023-22727CRITICALDatabase Query::offset() and limit() vulnerable to SQL injection in cakephpEPSS 0.9%CVE-2026-77635CRITICALCakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriverEPSS 0.5%CVE-2026-119418CRITICALCakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()EPSS 0.5%CVE-2026-119417MEDIUMCakePHP through 5.4.3 Email Header Injection via Bare CR/LF in SmtpTransport and MailTransportEPSS 0.5%CVE-2026-119419CRITICALCakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression CollationEPSS 0.4%CVE-2026-119415MEDIUMCakePHP through 5.4.3 MIME Header Injection via FormDataPart Content-TypeEPSS 0.4%