cortezaproject CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM cortezaproject CVE published 2026-05-11

CVE-2026-6093

A SQL injection vulnerability exists in Corteza's Microsoft SQL Server (MSSQL) backend when filtering Compose records by the meta field, affecting version 2024.9.8. This issue has a CVSS score of 6, indicating medium severity. The vulnerability is exploitable via network, requires low attack complexity, and can result in high impact on confidentiality and low impact on integrity. Defenders should verify t [truncated]