CVE-2026-115997 | pig-mesh pig up to 4.1.0 SqlFilterArgumentResolver.java orderItem.getColumn ascs/descs sql injection

October 24, 2026 Yanac

A vulnerability was found in pig-mesh pig up to 4.1.0 and classified as critical. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/data/resolver/SqlFilterArgumentResolver.java. Executing a manipulation of the argument ascs/descs can lead to sql injection.

The identification of this vulnerability is CVE-2026-115997. The attack may be launched remotely. Furthermore, there is an exploit available.

It is suggested to upgrade the affected component.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More