CVE-2026-64618

概要

参考情報

• apache/fineract#6153 · Issue Tracking
• lists.apache.org/thread/s8orckszcd9x4d1qsloc046ppf5q9oc7 · Mailing List
• openwall.com/lists/oss-security/2026/10/30/4 · Mailing List

fineract のその他の脆弱性

• CVE-2026-65874高 8.8This issue affects Apache Fineract versions up to and including 1.15.0. The Center read endpoint (GET /api/v1/centers) and the datatable ent…
• CVE-2026-57821高 8.1A SQL Injection vulnerability exists in Apache Fineract's Office Search API (GET /api/v1/offices) in versions up to and including 1.14.0. Th…
• CVE-2026-56287高 8.1A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API (GET /api/v1/clients) in versions up to and includ…
• CVE-2026-35152高 8.8A SQL Injection vulnerability exists in Apache Fineract's Report Execution API (runreports endpoint) in versions up to and including 1.14.0.…
• CVE-2025-58137高 8.1Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The …