CVE-2026-54598 | ellite Wallos up to 4.9.3 migration endpoints/db/migrate.php sql injection

August 31, 2026 Yanac

A vulnerability was found in ellite Wallos up to 4.9.3. It has been declared as critical. The affected element is an unknown function of the file endpoints/db/migrate.php of the component migration. Executing a manipulation can lead to sql injection.

This vulnerability is registered as CVE-2026-54598. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More