CVE-2026-65874

This issue affects Apache Fineract versions up to and including 1.15.0. The Center read endpoint (GET /api/v1/centers) and the datatable entry read endpoints (GET /api/v1/datatables/{datatable}/{apptableId} and GET /api/v1/datatables/{datatable}/{apptableId}/{datatableId}) concatenate caller-supplied ordering parameters (orderBy, sortOrder, order) directly into the SQL ORDER BY clause. The existing regex-based input validation can be bypassed, allowing time-based blind SQL injection by any authenticated user with read access to centers or to the targeted datatable. Users are recommended to upgrade to 1.16.1 which fixes the issue.

• CWE-89

• https://github.com/apache/fineract/pull/6230Issue Tracking, Patch, Vendor Advisory
• https://github.com/apache/fineract/pull/6277Issue Tracking, Patch
• https://lists.apache.org/thread/c4q539mkm5blnp5vdb72tzq6r9qg7bdhMailing List, Vendor Advisory
• https://www.openwall.com/lists/oss-security/2026/10/30/5Mailing List, Third Party Advisory

Published

Oct 30, 2026

Last Modified

Nov 6, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-6584A vulnerability was found in TransformerOptimus SuperAGI up …5.4
• CVE-2026-65841Jodit Editor is a WYSIWYG editor with a built-in file browse…5.3
• CVE-2026-65842Plate is a rich-text editor with AI and shadcn/ui. Prior to …8.2
• CVE-2026-6585A vulnerability was determined in TransformerOptimus SuperAG…5.4
• CVE-2026-6586A vulnerability was identified in TransformerOptimus SuperAG…6.3
• CVE-2026-6587A security flaw has been discovered in vibrantlabsai RAGAS u…6.3
• CVE-2026-65875BaserCMS provided by baserCMS Users Community contains a CSV…7.1
• CVE-2026-65876Joomla Extension - joomshaper.com - Unauthenticated SQL inje…9.2
• CVE-2026-65877Joomla Extension - joomshaper.com - Authenticated SQL inject…8.2
• CVE-2026-65878Joomla Extension - joomshaper.com - Authenticated arbitrary …8.3
• CVE-2026-65879Joomla Extension - joomshaper.com - Unauthenticated mail rel…9.8
• CVE-2026-6588A weakness has been identified in serge-chat serge up to 1.4…6.5