{"generated_at":"2026-10-23T14:54:11.816Z","count":3,"incidents":[{"id":"payload-sql-injection-in-sqlite-and-postgres-cve-2026-105845","url":"https://pwned.coffee/i/payload-sql-injection-in-sqlite-and-postgres-cve-2026-105845","title":"Payload: SQL Injection in SQLite and Postgres","summary":"### Impact A user can submit a request that exploits a SQL Injection vulnerability in Payload. You are affected if: - You use an affected Payload version. - Untrusted users can query readable collections using dynamic filters or joins. You are not affected if you use MongoDB (`@payloadcms/mongodb`). ### Patches Users should upgrade Payload packages to…","severity":"critical","patch_status":"patched","status":"past","exploited":false,"affected":"payload (npm)","fixed_versions":["payload 3.88.0","payload 4.0.0-canary.27"],"ids":["CVE-2026-105845"],"stack":["npm","postgres"],"first_seen":"2026-10-06T16:09:17Z","updated_at":"2026-10-06T16:09:17Z"},{"id":"sangoma-switchvox-sql-injection-vulnerability-cve-2026-9586","url":"https://pwned.coffee/i/sangoma-switchvox-sql-injection-vulnerability-cve-2026-9586","title":"Sangoma Switchvox SQL Injection Vulnerability","summary":"Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution. Added to CISA KEV on 2026-09-02 (federal deadline 2026-09-05).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Sangoma Switchvox","fixed_versions":[],"ids":["CVE-2026-9586"],"stack":["postgres"],"first_seen":"2026-09-02T12:00:00.000Z","updated_at":"2026-09-02T12:00:00.000Z"},{"id":"splunk-enterprise-missing-authentication-for-critical-fu-cve-2026-20253","url":"https://pwned.coffee/i/splunk-enterprise-missing-authentication-for-critical-fu-cve-2026-20253","title":"Splunk Enterprise Missing Authentication for Critical Function Vulnerability","summary":"Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. Added to CISA KEV on 2026-06-18 (federal deadline 2026-06-21).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Splunk Enterprise","fixed_versions":[],"ids":["CVE-2026-20253"],"stack":["postgres"],"first_seen":"2026-06-18T12:00:00.000Z","updated_at":"2026-06-18T12:00:00.000Z"}]}