SQL Injection

Everything Packet Tribune has reported about SQL Injection: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Arraytics Booktics Critical SQL Injection CVE-2026-109894 Affects Versions Up to 1.0.29

A critical SQL injection flaw in Arraytics Booktics versions up to 1.0.29 allows attackers to manipulate database queries, according to the National Vulnerability Database.

Oct 18, 2026

Vulnerabilities

SQL Injection in Fortinet and Metabase Enables Arbitrary File Operations

Security teams face high-severity SQL flaws in Fortinet appliances and Metabase analytics platforms that permit arbitrary file read and write actions.

Oct 13, 2026