CVE-2026-96827

Summary

This flaw allows an attacker to inject malicious SQL commands, potentially leading to data theft or manipulation through the Admin Notices Manager in versions 1.6.0 and below.

Exploitability

Exploitation requires administrative access and knowledge of the SQL injection vulnerability, making it moderately difficult.

Blast radius

If exploited, the attacker could gain full control over the database, leading to significant data loss or corruption.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to a version later than 1.6.0.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.