CVE-2026-119418 CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()
CriticalCVSS 9.2
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated frame offsets and directions to WindowExpression::range() and frame(). Attackers can pass crafted values through applications forwarding user input into the OVER clause to execute SQL with the database connection's privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cakephp/cakephp | <= 5.4.3 | No fix listed |
| ubuntu/cakephp(Ubuntu:22.04) | All versions | No fix listed |
References
- github.com patch
- github.com patch
- github.com patch
- github.com issue-tracking patch
- github.com technical-description
- abraxaslabs.tech third-party-advisory
- github.com product
- VulnCheck Advisory: CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame() third-party-advisory
- Ubuntu CVE tracker vendor-advisory
- www.cve.org