Vulnerabilities
VEX
CWE
ATT&CK
KEV Catalogs
All catalogs
Catalogue scorecard
GCVE
CISA
CIRCL
ENISA
Shadowserver
Previdian
Community
Sightings
Comments
Bundles
Organizations
Contributors
Statistics
Log in
About
Search term
Success
← All credits
Nguyen Manh Cuong (@cuongkt194)
1 vulnerability record and advisories credit this contributor.
CVE-2026-115191
A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface (/s/ajax). A request parameter that selects the contact field to search by is not properly validated before it is used in a database query. Any a