SQL Injection

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables)CVE-2026-27005chartbrew · CVSS 8.8 · 0.6% likely

   CWE-89

2. Chartbrew: SQL Injection via Missing Backslash Escaping in ClickHouse Variable SubstitutionCVE-2026-65980chartbrew · CVSS 7.9 · 0.5% likely

   CWE-89

3. Chartbrew SQL injection in dashboard filter substitutionCVE-2026-54349chartbrew · CVSS 9.8 · 0.4% likely

   CWE-89

4. Chartbrew: SQL Injection via row_limit Parameter in AI runQuery ToolCVE-2026-61852chartbrew · CVSS 5.8 · 0.4% likely

   CWE-89

5. Chartbrew: Blind NoSQL injection via date variable in embedded chartCVE-2026-85726chartbrew · CVSS 7.5 · 0.3% likely

   CWE-943

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.