LeakyCreds
NewInstant webhook alerts now available ā€” notified within seconds of any credential detection.Learn more ā†’
Home / Vulnerability Intelligence / CVE-2026-34018

CVE-2026-34018 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: April 20, 2026

CubeCart - SQL Injection

Published: April 17, 2026Updated: April 20, 2026Remote Exploitable

Overview

CubeCart < 6.6.0 contains an SQL injection caused by unsanitized input in product component, letting attackers execute arbitrary SQL statements remotely, exploit requires crafted input.

Severity & Score

Severity: Critical
CVSS Score: 9.8
EPSS Score: 2.7%(Probability of exploitation in next 30 days)

Impact

Attackers can execute arbitrary SQL statements, potentially leading to data theft or modification.

Mitigation

Upgrade to version 6.6.0 or later.

References

Social Media Activity(2 posts)

TheHackerWire
TheHackerWire
@thehackerwire
Apr 20, 2026

šŸ”“ CVE-2026-34018 - Critical (9.8) An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product. šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-34018/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Apr 20, 2026

šŸ”“ CVE-2026-34018 - Critical (9.8) An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product. šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-34018/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID
CVE-2026-34018
Severity
Critical
CVSS Score
9.8
Type
sql_injection
Status
confirmed
EPSS
2.7%
Social Posts
2

CWE

  • CWE-89

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

2.7%Probability of exploitation in the next 30 days