CVE-2026-6093

UNKNOWN 0.0

Corteza 2024.9.8 - SQL Injection in MSSQL JSON-path meta filter via incorrect T-SQL string escaping

CVSS Score

0.0

EPSS Score

0.4%

EPSS Percentile

27th

Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend when filtering Compose records by the meta field.This issue affects corteza: 2024.9.8.

CWE	CWE-89
Vendor	cortezaproject
Product	corteza
Published	May 11, 2026
Last Updated	Sep 24, 2026

Stay Ahead of the Next One

Get instant alerts for cortezaproject corteza

Be the first to know when new unknown vulnerabilities affecting cortezaproject corteza are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

cortezaproject / corteza

2024.9.8

References

NVD ↗ CVE.org ↗ EPSS Data ↗

fluidattacks.com: https://fluidattacks.com/es/advisories/motley github.com: https://github.com/cortezaproject/corteza github.com: https://github.com/cortezaproject/corteza/commit/64b58b9d7324e77248bacd183fb994ff338091ec

Credits

Fluid Attacks' AI SAST Scanner Oscar Uribe