CVE-2026-115934

{
  "etk_id": "ETK-2026-4007",
  "cve_id": "CVE-2026-115934",
  "display_id": "CVE-2026-115934",
  "ghsa_id": "GHSA-grcw-mp3h-6wqj",
  "euvd_id": "EUVD-2026-120517",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated SQL injection in Craft CMS search",
  "summary": "Craft CMS sites using craft.search with MySQL or MariaDB are affected by an unauthenticated SQL injection in front-end search requests. An attacker may read or modify application database data and potentially obtain administrator access. Sites not using the affected search feature or database engines are not described as affected by this advisory.",
  "mitigation": "Upgrade craftcms/cms to 5.11.2 or 4.18.9. Until upgrading, filter front-end query strings that contain the attribute parameter, including bracketed and percent-encoded forms.",
  "vendor": "craftcms",
  "product": "cms",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 4.0.0, < 4.18.9"
      ],
      "ecosystem": "composer",
      "fixed_versions": [
        "4.18.9"
      ],
      "package_name": "craftcms/cms",
      "purl": "pkg:composer/craftcms/cms"
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 5.0.0, < 5.11.2"
      ],
      "ecosystem": "composer",
      "fixed_versions": [
        "5.11.2"
      ],
      "package_name": "craftcms/cms",
      "purl": "pkg:composer/craftcms/cms"
    }
  ],
  "cwes": [
    89
  ],
  "cvss_score": 9.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 50.50334376666667,
  "t0_at": "2026-11-09T22:57:57.368000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-09T22:57:57.368000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-09T22:57:57.368000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115934"
    }
  }
}