Mautic is Vulnerable to SQL Injection through Contact Activity API Sorting

CAO 8.8CVE-2026-3105 · GHSA-r5j5-q42h-fc93 · Công bố 24/02/2026 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2026-3105 là lỗ hổng mức CAO (CVSS 8.8) ảnh hưởng mautic/core, mautic (acquia).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.33%, cao hơn 26.0% các lỗ hổng khác.
Cách xử lý: cập nhật lên 5.2.10, 6.0.8, 7.0.1, 4.4.19 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
mautic/core Packagist	`≥ 2.10.0, < 5.2.10≥ 6.0.0-alpha, < 6.0.8≥ 7.0.0-alpha, < 7.0.1`	`5.2.106.0.87.0.1`
mautic acquia	`≥ 2.10.0, < 4.4.19≥ 5.0.0, < 5.2.10≥ 6.0.0, < 6.0.8≥ 7.0.0, < 7.0.1`	`4.4.195.2.106.0.87.0.1`

Mô tả

Summary

This advisory addresses a SQL Injection vulnerability in the API endpoint used for retrieving contact activities. A vulnerability exists in the query construction for the Contact Activity timeline where the parameter responsible for determining the sort direction was not strictly validated against an allowlist, potentially allowing authenticated users to inject arbitrary SQL commands via the API.

Mitigation

Please update to 5.2.10, 6.0.8, 7.0.1 or later.

Workarounds

None.

References

If there are any questions or comments about this advisory:

Email Mautic at [email protected]

Mô tả của NVD

SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities. A vulnerability exists in the query construction for the Contact Activity timeline where the parameter responsible for determining the sort direction was not strictly validated against an allowlist, potentially allowing authenticated users to inject arbitrary SQL commands via the API. MitigationPlease update to 4.4.19, 5.2.10, 6.0.8, 7.0.1 or later. WorkaroundsNone. ReferencesIf you have any questions or comments about this advisory: Email us at [email protected]