CVE-2026-40018CWE-89sql-injection

CVE-2026-40018

High · published August 28, 2026

CVSS v3.1

7.4

EPSS

Percentile

23.4

In the wild

Unconfirmed

What it is

None None None No publicly available exploits are known.

The record

Technical detail

CVSS v3.1: 7.4 · HIGH
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0: Not supplied
EPSS: 0.00317 · 23.4th percentile
Weakness: CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published: 2026-08-28T16:16Z

References (1)

EPSS history

Timeline