CVE-2026-88756 | Pagekit up to 1.0.18 Login Endpoint /user/authenticate credentials sql injection

September 22, 2026 Yanac

A vulnerability was found in Pagekit up to 1.0.18. It has been rated as critical. This affects an unknown function of the file /user/authenticate of the component Login Endpoint. The manipulation of the argument credentials leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-88756. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More