PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← Back | CVE Intelligence Hub

CVE-2026-44706

Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-44706.

Coverage Span
2026-06-05
Reports
2 related reports

Associated Reports & Timeline

1.
[EN] CVE-2026-44706: SQL Injection in Chatwoot FilterService
yokai.hakaisecurity.io | vulnerability | | Original ↗ | .md | #vulnerability-research | #sql-injection | #research
Summary The Hakai Security Research Team has identified a critical SQL Injection vulnerability in Chatwoot versions <= 4.11.1 that allows any authenticated agent to read the entire PostgreSQL database, including user credentials and API tokens. The vulnerability resides in the FilterService method, where user input is directly interpolated into SQL queries without parameterization. Exploitation requires […]
2.
[PT-BR] CVE-2026-44706: SQL Injection in Chatwoot FilterService
yokai.hakaisecurity.io | vulnerability | | Original ↗ | .md | #vulnerability-research | #sql-injection | #research
Resumo A Equipe de Pesquisa da Hakai identificou uma vulnerabilidade crítica de Injeção de SQL nas versões do Chatwoot <= 4.11.1 que permite a qualquer agente autenticado ler todo o banco de dados PostgreSQL, incluindo credenciais de usuários e tokens de API. A vulnerabilidade reside no método FilterService, onde a entrada do usuário é inserida diretamente […]