CVE-2026-72562 | Pimcore admin-ui-classic-bundle up to 2.3 DataObject Grid ID sql injection

A vulnerability was found in Pimcore admin-ui-classic-bundle up to 2.3 and classified as problematic. Affected by this issue is some unknown functionality of the component DataObject Grid. Such manipulation of the argument ID leads to sql injection.

This vulnerability is referenced as CVE-2026-72562. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More