CVE-2026-39746

Summary

This flaw allows unauthenticated attackers to inject SQL commands, potentially leading to data theft or manipulation.

Exploitability

Exploitation is relatively easy as no authentication is required, and the vulnerability affects all unpatched instances.

Blast radius

If exploited, the impact could be severe, including unauthorized access to sensitive data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Booknetic 4.8.6 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.