Skip to content
[CVE-2026-44886] Pi.Alert - Unauthenticated SQL Injection
projectblack.io | research | CVE-2026-44886 | #vulnerability-research | #sql-injection | #vulnerability-disclosure | #pi-alert | #cve-2026-44886 | #unauthenticated
Summary
Pi.Alert has an unauthenticated SQL injection (CVE-2026-44886): an unsanitised scansource parameter lets attackers dump the whole database. Covers the code flow and a sqlmap proof of concept.
- Published
- Collected