CVE-2026-87936
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection.
- Severity: Medium
- CVSS 6.5
- EPSS 0.17%
- P4 · Track
Why P4: track.
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects amazee.ai Private AI Provider versions: from 0.0.0 to 1.3.7, from 1.4.0 to 1.4.3.
Weakness
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
References
- NVD record NVD
- CVE Program record CVE Program
- Reference NVD
- GitHub security advisory GitHub