CVE-2026-108087 | Apache Cocoon SQL processor/sql:esql sql injection

October 20, 2026 Yanac

A vulnerability described as critical has been identified in Apache Cocoon. Affected by this issue is some unknown functionality of the component SQL processor/sql:esql. The manipulation results in sql injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is reported as CVE-2026-108087. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More