Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-8054

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-8054.

Coverage Span: 2026-05-27
Reports: 1 related reports

Associated Reports & Timeline

CVE-2026-8054 — dotCMS Core Publish Audit API SQL Injection

CVE-2026-8054: unauthenticated SQL injection in dotCMS's /api/auditPublishing/getAll endpoint gives full read, modify and delete access to the PostgreSQL database in one request.