HIGH🇵🇱 Wersja polska

CVE-2026-49498

CVSS 8.7v4.0pub. 2026-06-10upd. 2026-06-11

Ghidra 11.0 before 12.1 contains a SQL injection vulnerability in the changePassword() method of PostgresFunctionDatabase that fails to escape double quotes in usernames interpolated into ALTER ROLE statements. Authenticated attackers can inject SQL commands via crafted username parameters in PasswordChange network messages to escalate to PostgreSQL superuser privileges and gain full database control.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Nsa Ghidra

    APP
    Nsa
    11.0 – 12.1 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2023-22671CRITICAL9.8PL ✓same product

Command injection w NSA Ghidra przez skrypt launch.sh

CVE-2019-16941CRITICAL9.8PL ✓same product

NSA Ghidra — RCE przez złośliwy plik XML w Bit Patterns Explorer

CVE-2019-13625CRITICAL9.1PL ✓same product

XXE w NSA Ghidra — odczyt plików i możliwy RCE przy otwieraniu projektu

CVE-2026-52750HIGH8.4same product

Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd....

CVE-2026-52751HIGH8.6same product

Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connecti...