Skip to content
Sign in
9.3 Critical

CVE-2026-49076 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows Blind SQL Injection.This issue affects JetEngine: from n/a through 3.8.9.1.

Affected products and versions

Product Affected versions Fixed in
JetEngine 3.8 earliest → 3.8.9.1 No fix stated
JetEngine 3.8 earliest → 3.8.9.1 No fix stated

Other CVEs of JetEngine

The 8 CVEs of JetEngine →
CVE-2026-54189 Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions 7.1 High CVE-2026-54188 Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions 7.1 High CVE-2026-54187 Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions 9.3 Critical CVE-2026-52706 Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions 9.8 Critical
Track this CVE