Do Son A critical SQL injection flaw (CVE-2025-50979) in NodeBB allows remote attackers to access sensitive data. Admins are urged to patch immediately.
NodeBB
The PoC exploit targets CVE-2022-46164, a critical vulnerability that could allow a remote attacker to bypass security restrictions
Tracked as CVE-2022-46164, the issue has a CVSS severity score of 9.4. The security flaw affects all versions of NodeBB prior < 2.6.1
NodeBB announced two security advisories to reveal information on the underlying security vulnerability, CVE-2022-36076, and CVE-2022-36045