CVE-2026-96826
HIGHCVSS 7.6/10
Last modified
CVE-2026-96826 is a high-severity vulnerability rated 7.6/10 on the CVSS scale. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shazzad Hossain Khan W4 Post List allows Blind SQL Injection. This issue affects W4 Post List: from n/a through 3.0.6..
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shazzad Hossain Khan W4 Post List allows Blind SQL Injection. This issue affects W4 Post List: from n/a through 3.0.6.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Shazzad Hossain Khan | W4 Post List | >= n/a, <= 3.0.6 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-96826?
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shazzad Hossain Khan W4 Post List allows Blind SQL Injection.
This issue affects W4 Post List: from n/a through 3.0.6.
How severe is CVE-2026-96826?
CVE-2026-96826 has a CVSS score of 7.6/10 (HIGH severity).
How do I fix CVE-2026-96826?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-9678Impact: Undici's cache interceptor incorrectly classifies so…5.9
- CVE-2026-9679Impact: undici's cookie parser in parseSetCookie percent-dec…5.9
- CVE-2026-9680Improper exposure of the MCP server in alibabacloud-rds-open…5.8
- CVE-2026-96804MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits …8.8
- CVE-2026-96807In Flatpak before 1.18.1, a malicious sandboxed app can repl…4
- CVE-2026-96808In Flatpak before 1.18.1, the revokefs writer, used by the f…7.4
- CVE-2026-96872Improper handling of insufficient permissions or privileges …2.9
- CVE-2026-96889A flaw was found in librsvg. When processing an SVG document…7.8
- CVE-2026-9689A flaw was found in Keycloak, an open-source identity and ac…4.2
- CVE-2026-9690Unauthenticated Arbitrary File Download in WP Media folder A…7.5
- CVE-2026-9691Unauthenticated PHP Object Injection in Integration for Acti…9.8
- CVE-2026-9692Mojolicious::Sessions::Storable versions through 0.05 for Pe…5.3
Are you affected by CVE-2026-96826?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST