CVE-2026-64618

Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fineract (through version 1.15.0). The vulnerability affects the outStandingAmountPercentageCondition parameter of the /fineract-provider/api/v1/search/advance HTTP API endpoint, allowing SQL injection due to insufficient input neutralization. Users are recommended to upgrade to version 1.16.1, which will fix the issue.

• CWE-89

• https://github.com/apache/fineract/pull/6153Issue Tracking, Patch
• https://lists.apache.org/thread/s8orckszcd9x4d1qsloc046ppf5q9oc7Mailing List, Vendor Advisory
• https://www.openwall.com/lists/oss-security/2026/10/30/4Mailing List, Third Party Advisory

Published

Oct 30, 2026

Last Modified

Nov 6, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-64612A flaw was found in libcupsfilters and cups-filters. The PNG…7.5
• CVE-2026-64613Data::Buffer::Shared versions before 0.05 for Perl create a …6.2
• CVE-2026-64614Data::Deque::Shared versions before 0.06 for Perl create a w…3.8
• CVE-2026-64615Data::Graph::Shared versions before 0.04 for Perl create a w…3.3
• CVE-2026-64616Data::NDArray::Shared versions before 0.02 for Perl create a…3.3
• CVE-2026-64617Data::PubSub::Shared versions before 0.07 for Perl create a …3.8
• CVE-2026-64619FileCodeBox before 2.4 contains a rate-limit bypass vulnerab…7.5
• CVE-2026-64620FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-ba…9.1
• CVE-2026-64621FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains…9.3
• CVE-2026-64622Network-AI (npm: network-ai) versions 5.12.2 through 5.13.3 …7.5
• CVE-2026-64623Network-AI before 5.13.4 contains an improper cryptographic …8.6
• CVE-2026-64624FreeRDP before 3.28.0 treats lines beginning with forward sl…8.5