CVE-2026-4776 — No title supplied

CVE-2026-4776

No title supplied PUBLISHED

Description (CNA)

An SQL injection vulnerability exists in Mautic's API contact filtering mechanism. Due to insufficient recursive sanitization of nested query parameters, an authenticated API user can bypass input filtering and inject arbitrary SQL commands.

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 2.6.0 before 4.4.20; affected 5.0.0 before 5.2.11; affected 6.0.0 before 6.0.9; affected 7.0.0 before 7.1.2

CWE

CWE-89

References

https://github.com/mautic/mautic/security/advisories/GHSA-fcmw-wx57-9p75

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.