01 Record

CVE-2026-48528

Metacat has an unauthenticated SQL injection vulnerability

CriticalPUBLISHEDCNA: GitHub_M

Base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

02 Description

Metacat has an unauthenticated SQL injection vulnerability

Published: 2026-08-14 17:56Z2 HR AGO
Last updated: 2026-08-14 18:00Z2 HR AGO
Reserved: 2026-05-21
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: Critical (CVSS 9.8)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-89 CWE-287
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 0004a8595852ad2e3570ce051560ba4667df981e0d76b8924df15ecf996a3865

VendorProductVersionsPlatforms

NCEASmetacat>= 2.0.0, < 3.4.1—