CVE-2023-26439

Summary

CVE-2023-26439 is a vulnerability affecting the cacheservice API. Maliciously crafted parameters with SQL syntax were not sufficiently sanitized, enabling attackers on local or restricted networks to execute arbitrary SQL queries. This issue allowed the unauthorized discovery of other users' cached data. We have implemented enhanced input checks and filters to prevent such attacks. No known public exploits exist.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.