CVE Catalog

CVE-2026-32555

CriticalCVSS 9.3
Published: Translated: NVD NIST

Summary

A vulnerability in Boost versions up to 2.0.4 allows unauthenticated SQL injection.

Risk Assessment

A remote attacker without authentication can manipulate database queries, potentially leading to data leakage or modification.

Recommendation

Update Boost to a version that fixes this vulnerability.

Original NVD description (English source)

Unauthenticated SQL Injection in Boost <= 2.0.4 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS