9.3
Critical
CVE-2026-42774 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine allows SQL Injection. This issue affects JetEngine: from n/a through 3.8.8.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JetEngine 3.8 | earliest → 3.8.8.1 | No fix stated |
Other CVEs of JetEngine
The 25 CVEs of JetEngine →
CVE-2026-39736
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock…
8.5
High
CVE-2026-39735
Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access…
6.5
Medium
CVE-2026-115608
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock…
8.5
High
CVE-2026-107870
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…
7.1
High