CVE-2026-116812 | Openpanel-dev OpenPanel up to 2.x Cohort Service cohort.service.ts profileColumnAccess name sql injection

October 27, 2026 Yanac

A vulnerability classified as critical was found in Openpanel-dev OpenPanel up to 2.x. This affects the function profileColumnAccess of the file cohort.service.ts of the component Cohort Service. Executing a manipulation of the argument Name can lead to sql injection.

This vulnerability is registered as CVE-2026-116812. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More