CVE-2026-44741Disclosure

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — the user-supplied `property` field from the filter JSON is interpolated directly into a `UNIX_TIMESTAMP(DATE(FROM_UNIXTIME(...)))` SQL expression without parameterization or allowlist validation. Versiosn 2.3.6 and 1.7.18 fix the issue.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 2 signals
Disclosure: 3 classified signals
Peaked 2d ago at 1 mentions (2026-08-12); latest day: 1
3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets2 URLs

By indicator

Full discourse3 posts

ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker38d
Disclosure
CVE-2026-44741 PimcoreのAdmin Classic Bundleの脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/08/19/cve-2026-44741-admin-classic-bundle/ #IT #Security #cybersecurity
Post summary
The linked article explains CVE‑2026‑44741 in Pimcore’s Admin Classic Bundle, covering its technical aspects, impact, and recommended countermeasures, but does not present a PoC, exploit code, or evidence of active exploitation.
0002048
208 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker30d
Disclosure
CVE-2026-44741 PimcoreのAdmin Classic Bundleの脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/08/19/cve-2026-44741-admin-classic-bundle/ #IT #Security #cybersecurity
Post summary
The post offers an easy‑to‑understand explanation of CVE‑2026‑44741 affecting Pimcore's Admin Classic Bundle, covering its impact and recommended mitigations.
0000043
203 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds46d
Disclosure
CVE-2026-44741 SQL Injection in Pimcore Admin Classic Bundle Translation Grid Date Filter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44741
Post summary
The post announces a newly discovered SQL injection vulnerability in Pimcore’s Admin Classic Bundle translation grid date filter, noting its CVE ID but providing no further exploit or patch details.
00000103
4.1K followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-44741

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerDisclosure

The linked article explains CVE‑2026‑44741 in Pimcore’s Admin Classic Bundle, covering its technical aspects, impact, and recommended countermeasures, but does not present a PoC, exploit code, or evidence of active exploitation.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerDisclosure

The post offers an easy‑to‑understand explanation of CVE‑2026‑44741 affecting Pimcore's Admin Classic Bundle, covering its impact and recommended mitigations.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces a newly discovered SQL injection vulnerability in Pimcore’s Admin Classic Bundle translation grid date filter, noting its CVE ID but providing no further exploit or patch details.