CVE-2026-94143

Summary

The vulnerability allows SQL injection through manipulation of the sort argument in the Mapper::orderBy function, posing a high risk due to remote exploitability.

Exploitability

Exploitation is relatively straightforward with public exploits available; requires access to the application's input parameters.

Blast radius

If exploited, could lead to data theft or corruption affecting users and systems interacting with the vulnerable application.

Prioritized remediation

Update drogonframework to version 1.9.14 or later to mitigate the vulnerability.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.