CVE-2026-25076: Anchore Enterprise GraphQL Reports API SQL injection
Anchore · Anchore Enterprise
Fixed in 5.25.1 · Affected: Anchore Enterprise before 5.25.1 · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 28% of scored CVEs
DescriptionCVE.org
Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API. An authenticated attacker that is able to access the GraphQL API could execute arbitrary SQL instructions resulting in modifications to the data contained in the Anchore Enterprise database.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Anchore · Anchore Enterprisebefore 5.25.1
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Weakness
- SQL Injection
- Vendor
- Anchore
- Published
- March 2026
CoverageNo articles yet
No CyberSIXT article names CVE-2026-25076 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.