Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-115191

Quick assessment

Affected
CVE-2026-115191
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mautic 管理界面的联系人查找 AJAX 端点（/s/ajax）中存在 SQL 注入漏洞。该端点用于指定搜索字段的请求参数在用于数据库查询前未进行适当验证。任何已认证的 Mautic 用户均可利用此漏洞，无论其账户被分配的角色或权限如何。攻击者可利用盲注技术（基于布尔值或基于时间），向 Mautic 数据库执行任意 SQL 查询，并读取该数据库用户有权访问的任何数据，包括包含电子邮件地址和密码哈希的 Mautic 用户账户、联系人数据，以及营销活动和邮件内容。

CVSS 7.1 · High

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

I. Basic Information for CVE-2026-115191

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface (/s/ajax). A request parameter that selects the contact field to search by is not properly validated before it is used in a database query. Any authenticated Mautic user can exploit this, regardless of the role or permissions assigned to the account. Using blind (boolean-based or time-based) techniques, the attacker can run arbitrary SQL queries against the Mautic database and read any data the Mautic database user can access, including Mautic user accounts with email addresses and password hashes, contact data, and campaign and email content.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- - 2.1.0 ~ 5.2.12 -

II. Public POCs for CVE-2026-115191

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-115191

请登录查看更多情报信息。

Other References for CVE-2026-115191 (1)

IV. Related Vulnerabilities

Same weakness: CWE-89