SecNews@SecNews_GR
Apache Fineract: διόρθωση για την CVE-2026-64618 στην 1.16.1 https://www.secnews.gr/744567/cve-2026-64618-apache-fineract-sqli/?fsp_sid=21720
0000076
7.0K followersView on X
CVE-2026-64618
LOWSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fineract (through version 1.15.0). The vulnerability affects the outStandingAmountPercentageCondition parameter of the /fineract-provider/api/v1/search/advance HTTP API endpoint, allowing SQL injection due to insufficient input neutralization. Users are recommended to upgrade to version 1.16.1, which will fix the issue.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-89
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day