Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API. An authenticated attacker that is able to access the GraphQL API could execute arbitrary SQL instructions resulting in modifications to the data contained in the Anchore Enterprise database.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-12 | 1 | Disclosure1 |
| 2026-03-14 | 2 | Disclosure2 |
CVE-2026-25076 had been published less than 18 hours earlier — an SQL injection flaw in Anchore's GraphQL repository interface that affects every version before 5.25.1. What stood out here wasn't the vulnerability itself, but the speed.
Post summary
The post announces the recent CVE-2026-25076, an SQL injection vulnerability in Anchore’s GraphQL repository, emphasizing it was disclosed in less than 18 hours.
CVE Alert: CVE-2026-25076 - Anchore - Anchore Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-25076-anchore-anchore-enterprise/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-25076 #anchore #anchore-enterprise
Post summary
A link to a CVE alert for Anchore Enterprise (CVE-2026-25076) is shared, but no further details or exploitation information are provided.
CVE-2026-25076 Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API. An authenticated attacker that is able to access the Grap… https://www.cve.org/CVERecord?id=CVE-2026-25076
Post summary
The text reports an SQL injection vulnerability (CVE‑2026‑25076) in Anchore Enterprise versions below 5.25.1, providing basic technical details but no PoC, exploit, or patch information.