- CVE ID
- sonatype-2026-005074
- CWE
- N/A
- CVE Description
- @budibase/server - SQL Injection via multipleStatements: true [CVE-2026-73300]
- Published
- Jul 25, 2026
- CVSS Score & Severity
9.0Critical
- CVSS Vector
- CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- EPSS Score
- 0%
- KEV Status
Not in KEV Catalog: No known exploits
- Vulnerable Methods
MySQLIntegration/constructor()JS
- Source
- Sonatype
