Critical Alert 1 Active Exploit Detected Today

CVE-2026-64849 MLflow Server-Side Request Forgery Vulnerability →
Powered by CVE Watchtower
×
August 20, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-63038NVD

Vulnerability Summary

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This allows an attacker to inject arbitrary SQL code through the
dbName, tableName, schemaName, and username parameters. 

This issue affects Apache InLong: from 2.0.0 before 2.4.0.



Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it.

[1]  https://github.com/apache/inlong/issues/12135 .
Severity Level
UNKNOWN
Published Date
Aug 20, 2026
Last Modified
Aug 20, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
Improper neutralization of special elements used in an SQL command, allowing attackers to modify queries.