CVE-2026-0603
A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.3
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
- EPSS probability
- 0.81%
- CWE
- CWE-89
- Published
- 2026-01-23
- Last modified
- 2026-09-14
Affected products
- Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8
- Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8
- Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9
- Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9
- Red Hat Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
- Red Hat Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Weakness type
Related vulnerabilities
- CVE-2026-76461 — Cisco Secure Email Gateway SQL Injection Vulnerability
- CVE-2026-67401 — A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTr
- CVE-2026-61667 — DIRAC: RCE in FileCatalog DatasetManager via SQL injection + eval
- CVE-2026-18658 — IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed
- CVE-2026-9163 — SQLi in GIS Informatics' GisLab Laboratory Management System
- CVE-2026-86460 — Apache Syncope: Cypher Injection via FIQL Search on Neo4j Persistence
- CVE-2026-82232 — Apache Syncope: SQL injection via sort parameter in Task search
- CVE-2026-77051 — Apache Syncope: SQL injection via unsanitized entityKey and opEvent in Audit Events search