CVE-2026-63221 | CodeIgniter up to 4.7.3 Query Builder deleteBatch sql injection

July 31, 2026 Yanac

A vulnerability classified as critical was found in CodeIgniter up to 4.7.3. Affected by this vulnerability is the function deleteBatch of the component Query Builder. Executing a manipulation can lead to sql injection.

This vulnerability is registered as CVE-2026-63221. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More