Sql-injection

2 posts tagged with “Sql-injection”

CVE-2026-85787: AWS postgres MCP read-only denylist missed set_config()
cveawslabspostgres-mcp-server

CVE-2026-85787: AWS postgres MCP read-only denylist missed set_config()

How to fix CVE-2026-85787: upgrade awslabs.postgres-mcp-server to 1.1.7 or newer

Sep 4, 2026
Read
CVE-2026-53561: Apache Hive HiveServer2 SAML Bearer Impersonation
cveapache-hiveauthn

CVE-2026-53561: Apache Hive HiveServer2 SAML Bearer Impersonation

How to fix CVE-2026-53561: upgrade Apache Hive to 4.2.1. Unauthenticated SAML Bearer impersonation in HiveServer2 HTTP. Same 4.2.1 train as Metastore SQLi and Avro SerDe SSRF. Not RCE. Not the Kerberos default.

Aug 25, 2026
Read