Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenCATS through 0.9.7.4 contains a sql injection vulnerability in the sortDirection parameter of the DataGrid component that allows authenticated users to extract database contents. Attackers can inject malicious SQL via the sortDirection parameter in ajax/getDataGridPager.php to perform time-based blind injection attacks and read sensitive data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-49489 OpenCATS through 0.9.7.4 contains a sql injection vulnerability in the sortDirection parameter of the DataGrid component that allows authenticated users to extract da… https://www.cve.org/CVERecord?id=CVE-2026-49489
Post summary
OpenCATS versions up to 0.9.7.4 contain an authenticated SQL injection vulnerability in the DataGrid component’s sortDirection parameter, enabling data extraction.
CVE-2026-49489 SQL Injection in OpenCATS 0.9.7.4 DataGrid sortDirection Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-49489
Post summary
The statement announces a new SQL Injection vulnerability (CVE‑2026‑49489) affecting OpenCATS 0.9.7.4, providing technical details but no PoC, exploit, or mitigation.