CVE-2026-59514

CriticalCVSS 9.3

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Summary

Buddyboss Platform versions up to 3.0.5 contain an unauthenticated SQL injection vulnerability. An attacker can remotely execute arbitrary SQL queries.

Risk Assessment

Risk of unauthorized database access, data theft or manipulation.

Recommendation

Update Buddyboss Platform to the latest version.

Original NVD description (English source)

Unauthenticated SQL Injection in Buddyboss Platform <= 3.0.5 versions.