pwn.watch: SQL injection incident updates https://pwn.watch/t/sql-injection Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:23:59 GMT [high] Cisco Secure Email Gateway: Cisco Secure Email Gateway SQL Injection Vulnerability: CISA added CVE-2026-76461 to the KEV catalog (due 2026-09-17). https://pwn.watch/i/cisco-secure-email-gateway-cve-2026-76461 cisco-secure-email-gateway-cve-2026-76461:2026-09-14:CISA added CVE-2026-76461 to the KEV catalog (due 2026-09-17). Mon, 14 Sep 2026 00:00:00 GMT high Status: closed, patched [high] Sangoma Switchvox: Sangoma Switchvox SQL Injection Vulnerability: CISA added CVE-2026-9586 to the KEV catalog (due 2026-09-05). https://pwn.watch/i/sangoma-switchvox-cve-2026-9586 sangoma-switchvox-cve-2026-9586:2026-09-02:CISA added CVE-2026-9586 to the KEV catalog (due 2026-09-05). Wed, 02 Sep 2026 00:00:00 GMT high Status: closed, patched [high] Metabase Metabase: Metabase SQL Injection Vulnerability: CISA added CVE-2026-72898 to the KEV catalog (due 2026-08-14). https://pwn.watch/i/metabase-metabase-cve-2026-72898 metabase-metabase-cve-2026-72898:2026-08-11:CISA added CVE-2026-72898 to the KEV catalog (due 2026-08-14). Tue, 11 Aug 2026 00:00:00 GMT high Status: closed, patched [high] WordPress Core: WordPress Core SQL Injection Vulnerability: CISA added CVE-2026-60137, CVE-2026-63030 to the KEV catalog (due 2026-08-04). https://pwn.watch/i/wordpress-core-cve-2026-60137 wordpress-core-cve-2026-60137:2026-07-21:CISA added CVE-2026-60137, CVE-2026-63030 to the KEV catalog (due 2026-08-04). Tue, 21 Jul 2026 00:00:00 GMT high Status: closed, patched [high] Drupal Core: Drupal Core SQL Injection Vulnerability: CISA added CVE-2026-9082 to the KEV catalog (due 2026-05-27). https://pwn.watch/i/drupal-core-cve-2026-9082 drupal-core-cve-2026-9082:2026-05-22:CISA added CVE-2026-9082 to the KEV catalog (due 2026-05-27). Fri, 22 May 2026 00:00:00 GMT high Status: closed, patched [high] BerriAI LiteLLM: BerriAI LiteLLM SQL Injection Vulnerability: CISA added CVE-2026-42208 to the KEV catalog (due 2026-05-11). https://pwn.watch/i/berriai-litellm-cve-2026-42208 berriai-litellm-cve-2026-42208:2026-05-08:CISA added CVE-2026-42208 to the KEV catalog (due 2026-05-11). Fri, 08 May 2026 00:00:00 GMT high Status: closed, patched [high] Fortinet FortiClient EMS: Fortinet FortiClient EMS SQL Injection Vulnerability: CISA added CVE-2026-21643 to the KEV catalog (due 2026-04-16). https://pwn.watch/i/fortinet-forticlient-ems-cve-2026-21643 fortinet-forticlient-ems-cve-2026-21643:2026-04-13:CISA added CVE-2026-21643 to the KEV catalog (due 2026-04-16). Mon, 13 Apr 2026 00:00:00 GMT high Status: closed, patched [critical] Fortinet FortiWeb: FortiWeb SQL Injection Vulnerability: CISA added CVE-2025-25257 to the KEV catalog (due 2025-08-08). https://pwn.watch/i/fortinet-fortiweb-cve-2025-25257 fortinet-fortiweb-cve-2025-25257:2025-07-18:CISA added CVE-2025-25257 to the KEV catalog (due 2025-08-08). Fri, 18 Jul 2025 00:00:00 GMT critical Status: closed, patched [critical] Advantive VeraCore: 2 exploited vulnerabilities (CVE-2024-57968, CVE-2025-25181): CISA added CVE-2024-57968 to the KEV catalog (due 2025-03-31). https://pwn.watch/i/advantive-veracore-cve-2024-57968 advantive-veracore-cve-2024-57968:2025-03-10:CISA added CVE-2024-57968 to the KEV catalog (due 2025-03-31). Mon, 10 Mar 2025 00:00:00 GMT critical Status: closed, patched [critical] Advantive VeraCore: 2 exploited vulnerabilities (CVE-2024-57968, CVE-2025-25181): CISA added CVE-2025-25181 to the KEV catalog (due 2025-03-31). https://pwn.watch/i/advantive-veracore-cve-2024-57968 advantive-veracore-cve-2024-57968:2025-03-10:CISA added CVE-2025-25181 to the KEV catalog (due 2025-03-31). Mon, 10 Mar 2025 00:00:00 GMT critical Status: closed, patched [critical] Sophos CyberoamOS: CyberoamOS (CROS) SQL Injection Vulnerability: CISA added CVE-2020-29574 to the KEV catalog (due 2025-02-27). https://pwn.watch/i/sophos-cyberoamos-cve-2020-29574 sophos-cyberoamos-cve-2020-29574:2025-02-06:CISA added CVE-2020-29574 to the KEV catalog (due 2025-02-27). Thu, 06 Feb 2025 00:00:00 GMT critical Status: closed, unpatched [critical] Palo Alto Networks Expedition: 3 actively exploited vulnerabilities: CISA added CVE-2024-9463 to the KEV catalog (federal deadline 2024-12-05) https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465 palo-alto-networks-expedition-cve-2024-5910-9463-9465:2024-11-14:CISA added CVE-2024-9463 to the KEV catalog (federal deadline 2024-12-05) Thu, 14 Nov 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Palo Alto Networks Expedition: 3 actively exploited vulnerabilities: CISA added CVE-2024-9465 to the KEV catalog (federal deadline 2024-12-05) https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465 palo-alto-networks-expedition-cve-2024-5910-9463-9465:2024-11-14:CISA added CVE-2024-9465 to the KEV catalog (federal deadline 2024-12-05) Thu, 14 Nov 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Palo Alto Networks Expedition: 3 actively exploited vulnerabilities: CISA added CVE-2024-5910 to the KEV catalog (federal deadline 2024-11-28) https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465 palo-alto-networks-expedition-cve-2024-5910-9463-9465:2024-11-07:CISA added CVE-2024-5910 to the KEV catalog (federal deadline 2024-11-28) Thu, 07 Nov 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: FortiGuard Labs details the zero-day chain used against Ivanti CSA https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380:2024-10-11:FortiGuard Labs details the zero-day chain used against Ivanti CSA Fri, 11 Oct 2024 00:00:00 GMT critical Source: https://www.fortinet.com/blog/threat-research/burning-zero-days-suspected-nation-state-adversary-targets-ivanti-csa Status: closed, patched [critical] Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CISA added CVE-2024-9379 to the KEV catalog (federal deadline 2024-10-30) https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380:2024-10-09:CISA added CVE-2024-9379 to the KEV catalog (federal deadline 2024-10-30) Wed, 09 Oct 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CISA added CVE-2024-9380 to the KEV catalog (federal deadline 2024-10-30) https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380:2024-10-09:CISA added CVE-2024-9380 to the KEV catalog (federal deadline 2024-10-30) Wed, 09 Oct 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Palo Alto Networks Expedition: 3 actively exploited vulnerabilities: CVE-2024-9463 published https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465 palo-alto-networks-expedition-cve-2024-5910-9463-9465:2024-10-09:CVE-2024-9463 published Wed, 09 Oct 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-9463 Status: closed, patched [critical] Palo Alto Networks Expedition: 3 actively exploited vulnerabilities: CVE-2024-9465 published https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465 palo-alto-networks-expedition-cve-2024-5910-9463-9465:2024-10-09:CVE-2024-9465 published Wed, 09 Oct 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-9465 Status: closed, patched [critical] Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CVE-2024-9379 published https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380:2024-10-08:CVE-2024-9379 published Tue, 08 Oct 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-9379 Status: closed, patched [critical] Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CVE-2024-9380 published https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380:2024-10-08:CVE-2024-9380 published Tue, 08 Oct 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-9380 Status: closed, patched [critical] Ivanti Endpoint Manager (EPM) SQL Injection: CISA added CVE-2024-29824 to the KEV catalog (federal deadline 2024-10-23) https://pwn.watch/i/ivanti-endpoint-manager-epm-cve-2024-29824 ivanti-endpoint-manager-epm-cve-2024-29824:2024-10-02:CISA added CVE-2024-29824 to the KEV catalog (federal deadline 2024-10-23) Wed, 02 Oct 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CVE-2024-8963 published https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380:2024-09-19:CVE-2024-8963 published Thu, 19 Sep 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-8963 Status: closed, patched [critical] Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CISA added CVE-2024-8963 to the KEV catalog (federal deadline 2024-10-10) https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380:2024-09-19:CISA added CVE-2024-8963 to the KEV catalog (federal deadline 2024-10-10) Thu, 19 Sep 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Progress WhatsUp Gold SQL Injection: CISA added CVE-2024-6670 to the KEV catalog (federal deadline 2024-10-07) https://pwn.watch/i/progress-whatsup-gold-cve-2024-6670 progress-whatsup-gold-cve-2024-6670:2024-09-16:CISA added CVE-2024-6670 to the KEV catalog (federal deadline 2024-10-07) Mon, 16 Sep 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CISA added CVE-2024-8190 to the KEV catalog (federal deadline 2024-10-04) https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380:2024-09-13:CISA added CVE-2024-8190 to the KEV catalog (federal deadline 2024-10-04) Fri, 13 Sep 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CVE-2024-8190 published https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380:2024-09-10:CVE-2024-8190 published Tue, 10 Sep 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-8190 Status: closed, patched [critical] Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: Ivanti publishes the advisory for CVE-2024-8190 https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380:2024-09-10:Ivanti publishes the advisory for CVE-2024-8190 Tue, 10 Sep 2024 00:00:00 GMT critical Source: https://www.fortinet.com/blog/threat-research/burning-zero-days-suspected-nation-state-adversary-targets-ivanti-csa Status: closed, patched [critical] Progress WhatsUp Gold SQL Injection: CVE-2024-6670 published https://pwn.watch/i/progress-whatsup-gold-cve-2024-6670 progress-whatsup-gold-cve-2024-6670:2024-08-29:CVE-2024-6670 published Thu, 29 Aug 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-6670 Status: closed, patched [critical] Palo Alto Networks Expedition: 3 actively exploited vulnerabilities: CVE-2024-5910 published https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465 palo-alto-networks-expedition-cve-2024-5910-9463-9465:2024-07-10:CVE-2024-5910 published Wed, 10 Jul 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-5910 Status: closed, patched [critical] Ivanti Endpoint Manager (EPM) SQL Injection: CVE-2024-29824 published https://pwn.watch/i/ivanti-endpoint-manager-epm-cve-2024-29824 ivanti-endpoint-manager-epm-cve-2024-29824:2024-05-31:CVE-2024-29824 published Fri, 31 May 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-29824 Status: closed, patched [critical] Fortinet FortiClient EMS SQL Injection: CISA added CVE-2023-48788 to the KEV catalog (federal deadline 2024-04-15) https://pwn.watch/i/fortinet-forticlient-ems-cve-2023-48788 fortinet-forticlient-ems-cve-2023-48788:2024-03-25:CISA added CVE-2023-48788 to the KEV catalog (federal deadline 2024-04-15) Mon, 25 Mar 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Fortinet FortiClient EMS SQL Injection: CVE-2023-48788 published https://pwn.watch/i/fortinet-forticlient-ems-cve-2023-48788 fortinet-forticlient-ems-cve-2023-48788:2024-03-12:CVE-2023-48788 published Tue, 12 Mar 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2023-48788 Status: closed, patched [critical] F5 BIG-IP Configuration Utility: 2 exploited vulnerabilities (CVE-2023-46747, CVE-2023-46748): CISA added CVE-2023-46747 to the KEV catalog (due 2023-11-21). https://pwn.watch/i/f5-big-ip-configuration-utility-cve-2023-46747-46748 f5-big-ip-configuration-utility-cve-2023-46747-46748:2023-10-31:CISA added CVE-2023-46747 to the KEV catalog (due 2023-11-21). Tue, 31 Oct 2023 00:00:00 GMT critical Status: closed, patched [critical] F5 BIG-IP Configuration Utility: 2 exploited vulnerabilities (CVE-2023-46747, CVE-2023-46748): CISA added CVE-2023-46748 to the KEV catalog (due 2023-11-21). https://pwn.watch/i/f5-big-ip-configuration-utility-cve-2023-46747-46748 f5-big-ip-configuration-utility-cve-2023-46747-46748:2023-10-31:CISA added CVE-2023-46748 to the KEV catalog (due 2023-11-21). Tue, 31 Oct 2023 00:00:00 GMT critical Status: closed, patched [critical] MOVEit Transfer zero-day: Cl0p mass data theft: Third round of fixes for CVE-2023-35708 after a public proof of concept https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023 moveit-transfer-cl0p-mass-exploitation-2023:2023-06-16:Third round of fixes for CVE-2023-35708 after a public proof of concept Fri, 16 Jun 2023 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2023-35708 Status: closed, patched [critical] MOVEit Transfer zero-day: Cl0p mass data theft: Progress fixes more SQL injection bugs found during code review (CVE-2023-35036) https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023 moveit-transfer-cl0p-mass-exploitation-2023:2023-06-09:Progress fixes more SQL injection bugs found during code review (CVE-2023-35036) Fri, 09 Jun 2023 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2023-35036 Status: closed, patched [critical] MOVEit Transfer zero-day: Cl0p mass data theft: CISA and FBI publish joint advisory AA23-158A attributing the campaign to the Cl0p ransomware gang (TA505) https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023 moveit-transfer-cl0p-mass-exploitation-2023:2023-06-07:CISA and FBI publish joint advisory AA23-158A attributing the campaign to the Cl0p ransomware gang (TA505) Wed, 07 Jun 2023 00:00:00 GMT critical Source: https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-158a Status: closed, patched [critical] MOVEit Transfer zero-day: Cl0p mass data theft: CISA adds CVE-2023-34362 to the KEV catalog https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023 moveit-transfer-cl0p-mass-exploitation-2023:2023-06-02:CISA adds CVE-2023-34362 to the KEV catalog Fri, 02 Jun 2023 00:00:00 GMT critical Status: closed, patched [critical] MOVEit Transfer zero-day: Cl0p mass data theft: Progress discloses the critical MOVEit Transfer vulnerability and ships patches https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023 moveit-transfer-cl0p-mass-exploitation-2023:2023-05-31:Progress discloses the critical MOVEit Transfer vulnerability and ships patches Wed, 31 May 2023 00:00:00 GMT critical Source: https://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-31May2023 Status: closed, patched [critical] MOVEit Transfer zero-day: Cl0p mass data theft: Earliest exploitation of the MOVEit Transfer zero-day seen by Mandiant https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023 moveit-transfer-cl0p-mass-exploitation-2023:2023-05-27:Earliest exploitation of the MOVEit Transfer zero-day seen by Mandiant Sat, 27 May 2023 00:00:00 GMT critical Source: https://cloud.google.com/blog/topics/threat-intelligence/zero-day-moveit-data-theft Status: closed, patched