CVE-2026-57679
CriticalCVSS 9.3Summary
GeekyBot versions up to 1.2.5 are vulnerable to unauthenticated SQL injection. An attacker can remotely execute arbitrary SQL queries without authentication.
Risk Assessment
The risk includes unauthorized database access, data leakage, and potential system compromise.
Recommendation
Immediately upgrade GeekyBot to a version newer than 1.2.5 where the vulnerability is fixed.
Other vulnerabilities in GeekyBot
See all- CVE-2026-40772Critical
GeekyBot versions up to 1.2.2 have a vulnerability allowing unauthenticated arbitrary file uploads.
- CVE-2026-39519Critical
GeekyBot versions up to 1.2.0 are vulnerable to unauthenticated SQL injection, which may lead to unauthorized access to the database.
- CVE-2026-61965High
The GeekyBot plugin versions up to 1.2.6 contain a Cross-Site Scripting (XSS) vulnerability that can be exploited without authentication.
Original NVD description (English source)
Unauthenticated SQL Injection in GeekyBot <= 1.2.5 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS