CVE-2026-108474
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions
Published Oct 10, 2026 · updated Oct 14, 2026
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions
Timeline
Detection, updates, and resolution for this record.
Oct 10, 2026 · NIST NVD
Detected
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions
Oct 14, 2026 · NIST NVD
Updated
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions
Sources
- CVE.orgCVE-2026-108474
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-108474
30-day exploitation probability 0.3%
first.org - NIST NVDCVE-2026-108474
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions
nvd.nist.gov