CVE-2026-55208

Pimcore Studio Backend Bundle is the backend bundle for Pimcore Studio. Prior to 2025.4.6 and 2026.1.6, an authenticated user can extract the admin password hash and other database content through time-based blind SQL injection in the DateFilter column key parameter. The POST /pimcore-studio/api/website-settings endpoint and other listing endpoints accept a columnFilters array where the key field is interpolated directly into SQL with manual backtick wrapping, allowing a backtick character to break out of quoting and append arbitrary SQL such as SLEEP() and IF() subqueries. This issue is fixed in versions 2025.4.6 and 2026.1.6.

• CWE-89

• https://github.com/pimcore/pimcore/security/advisories/GHSA-79cw-hfcc-7mw9
• https://github.com/pimcore/studio-backend-bundle/commit/f532428cfbf4f5d6e299a13cedd5c29541802552
• https://github.com/pimcore/studio-backend-bundle/pull/1883
• https://github.com/pimcore/studio-backend-bundle/releases/tag/v2025.4.6
• https://github.com/pimcore/studio-backend-bundle/releases/tag/v2026.1.6
• https://github.com/pimcore/pimcore/security/advisories/GHSA-79cw-hfcc-7mw9

Published

Jul 9, 2026

Last Modified

Jul 10, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55202Tinyproxy through 1.11.3, fixed in commit 09312a1, fails to …8.8
• CVE-2026-55203HAProxy through 3.4.0, fixed in commit 5985276, contains an …9.1
• CVE-2026-55204HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a …8.7
• CVE-2026-55205Hermes WebUI before 0.51.468 contains a resource exhaustion …5.3
• CVE-2026-55206py7zr is a Python-based library and utility to support 7zip …8.7
• CVE-2026-55207Pimcore is an Open Source Data & Experience Management Platf…8.8
• CVE-2026-55209resdata is software for reading and writing result files fro…9.8
• CVE-2026-55210Joplin is an open source note-taking and to-do application t…7.4
• CVE-2026-55211Surfio is a library for reading and writing surface files. P…9.8
• CVE-2026-55212Pimcore is an Open Source Data & Experience Management Platf…7.1
• CVE-2026-55213h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and …7.5
• CVE-2026-55215MariaDB Connector/Node.js is used to connect applications de…7.5