SQL Injection and Remote Code Execution Vulnerability in Budibase

72% confidence

Description

An authenticated remote attacker can exploit a vulnerability in Budibase to perform SQL Injection or execute arbitrary code.

Vendor	Product	Versions
—	budibase	—

Tier B

BSI Advisories1h ago

→ No new info (linked only)

CISA KEV❌ No

Actively exploited❌ No

CWECWE-89, CWE-94

PublishedJun 18, 2026

Last enriched1h ago

0 upvotes0 downvotes

No votes yet

State: reported

Confidence: 72%

CVE Published

Jun 18, 2026

Discovered by ZDM

Jun 18, 2026