PBH-BTN CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM PBH-BTN CVE published 2026-10-16

CVE-2026-62362

A SQL injection vulnerability exists in PeerBanHelper versions from 5.0.0 to 9.3.14 in the /api/statistic/analysis/field endpoint. An authenticated user can exploit this by providing a crafted field query parameter, potentially leading to unauthorized data access. The vulnerability arises from the interpolation of unrecognized field names into SQL through ${field} in the MyBatis mapper. This issue can res [truncated]