Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #122, there is a critical SQL Injection (SQLi) vulnerability in ClipBucket, exploitable through the type parameter on the authenticated admin endpoint admin_area/action_logs.php. The endpoint admin_area/action_logs.php reads $_GET['type'], stores it in $result_array['type'], and forwards it into fetch_action_logs(), where the value is concatenated directly into a SQL WHERE condition on action_type without parameterization. This allows UNION-based SQL injection and direct data exfiltration from the database. This vulnerability is fixed in 5.5.3 - #122.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-42847 ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #122, there is a critical SQL Injection (SQLi) vulnerability in ClipBucket, exploitable throu… https://www.cve.org/CVERecord?id=CVE-2026-42847
Post summary
The snippet highlights CVE-2026-42847 as a critical SQL Injection in ClipBucket v5, providing its basic technical details without mentioning PoC, exploit tools, or active exploitation.
CVE-2026-42847 SQL Injection in ClipBucket v5 Admin Action Logs Endpoint Prior t... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42847 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The text announces CVE-2026-42847, a SQL Injection vulnerability in ClipBucket v5’s admin action logs endpoint, with a link to VulMon for additional details.