CVE-2026-73698 | FileRun up to 2026.2.1 Logs Listing DB/DP.php getValuesString Description sql injection

September 10, 2026 Yanac

A vulnerability was found in FileRun 1.0/2018.02.13/2019.05.21/2021.03.26/2026.2.1 and classified as problematic. Impacted is the function getValuesString of the file DB/DP.php of the component Logs Listing Component. Executing a manipulation of the argument Description can lead to sql injection.

The identification of this vulnerability is CVE-2026-73698. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More