CVE-2026-62031

SQL Injection vulnerability in uListing versions up to and including 2.2.0. An unauthenticated attacker can inject malicious SQL queries, potentially leading to disclosure or modification of database data. The issue affects unauthenticated access.

An unauthenticated attacker can remotely exploit the vulnerability without logging in, posing a risk of data leakage, modification, or deletion from the database. Organizations using the vulnerable version are exposed to serious consequences.

Update uListing to a version later than 2.2.0 or apply available security patches. Until updated, consider restricting access to the application.