CVE-2026-52673

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

SQL Injection vulnerability in Cboard v.0.4.2 and before allows a remote attacker to execute arbitrary code via the getDimensionsValues component

Published 2026-06-23. Last modified 2026-07-05.