A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injecting crafted SQL statements.

Critical CVSS 9.8

CVECVE-2026-88402

First seen2026-09-22 15:17 UTC

Disclosed2026-09-21 21:17 UTC

Last updated2026-09-22 15:17 UTC

Channel statusauto

Summary

A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injecting crafted SQL statements.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://github.com/czx1111/cve/issues/6
https://github.com/czx1111/cve/issues/6

Timeline

2026-09-22 nvd_ingest NVD