CVE-2026-3023
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'. This vulnerability could allow an authenticated user to alter a POST request to the affected endpoint for the purpose of injecting NoSQL commands, allowing them to list both pets and owner names.
| CWE | CWE-943 |
| Vendor | wakyma |
| Product | wakyma application web |
| Published | Mar 16, 2026 |
| Last Updated | Mar 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for wakyma wakyma application web
Be the first to know when new unknown vulnerabilities affecting wakyma wakyma application web are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Wakyma / Wakyma application web
all versions