CVE-2026-55208

Pimcore Studio Backend Bundle is the backend bundle for Pimcore Studio. Prior to 2025.4.6 and 2026.1.6, an authenticated user can extract the admin password hash and other database content through time-based blind SQL injection in the DateFilter column key parameter. The POST /pimcore-studio/api/website-settings endpoint and other listing endpoints accept a columnFilters array where the key field is interpolated directly into SQL with manual backtick wrapping, allowing a backtick character to break out of quoting and append arbitrary SQL such as SLEEP() and IF() subqueries. This issue is fixed in versions 2025.4.6 and 2026.1.6.

• CWE-89

• https://github.com/pimcore/pimcore/security/advisories/GHSA-79cw-hfcc-7mw9
• https://github.com/pimcore/studio-backend-bundle/commit/f532428cfbf4f5d6e299a13cedd5c29541802552
• https://github.com/pimcore/studio-backend-bundle/pull/1883
• https://github.com/pimcore/studio-backend-bundle/releases/tag/v2025.4.6
• https://github.com/pimcore/studio-backend-bundle/releases/tag/v2026.1.6
• https://github.com/pimcore/pimcore/security/advisories/GHSA-79cw-hfcc-7mw9

Published

Jul 9, 2026

Last Modified

Jul 10, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55202Tinyproxy through 1.11.3, fixed in commit 09312a1, fails to …8.8
• CVE-2026-55203HAProxy through 3.4.0, fixed in commit 5985276, contains an …9.1
• CVE-2026-55204HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a …8.7
• CVE-2026-55205Hermes WebUI before 0.51.468 contains a resource exhaustion …6.9
• CVE-2026-55206py7zr is a Python-based library and utility to support 7zip …8.7
• CVE-2026-55207Pimcore is an Open Source Data & Experience Management Platf…8.8
• CVE-2026-55212Pimcore is an Open Source Data & Experience Management Platf…7.1
• CVE-2026-55213h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and …7.5
• CVE-2026-55219Paymenter is a free and open-source webshop solution for man…5.3
• CVE-2026-55223c3p0 is a JDBC Connection pooling library. In versions prior…6.3
• CVE-2026-55229Gotenberg is a Docker-powered stateless API for PDF files. P…7.5
• CVE-2026-5523The Divi Form Builder plugin for WordPress is vulnerable to …8.8