CVE-2026-115192 | Mautic up to 5.2.11/6.0.9/7.2.1 Dashboard Widget /api/data filter sql injection

October 26, 2026 Yanac

A vulnerability was found in Mautic up to 5.2.11/6.0.9/7.2.1 and classified as critical. This issue affects some unknown processing of the file /api/data of the component Dashboard Widget. Executing a manipulation of the argument filter can lead to sql injection.

This vulnerability is registered as CVE-2026-115192. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More