CVE-2026-52888 | NocoBase up to 2.0.59 SQL Collection utils.ts checkSQL incomplete blacklist

July 15, 2026 Yanac

A vulnerability has been found in NocoBase up to 2.0.59 and classified as problematic. This affects the function checkSQL of the file packages/plugins/@nocobase/plugin-collection-sql/src/server/utils.ts of the component SQL Collection. The manipulation leads to incomplete blacklist.

This vulnerability is listed as CVE-2026-52888. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More