PatchSiren

kuafuai CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH kuafuai CVE published 2026-10-16

CVE-2026-111718

AipexBase through commit 690adb9 contains a SQL injection vulnerability via the /api/data/invoke endpoint, allowing attackers to inject SQL through order_by and group_by fields. This could enable reading other users' rows and tables. The vulnerability requires defenders to verify exposure, implement compensating controls, and prioritize remediation to prevent potential data exposure. AipexBase deployments [truncated]