Unauthenticated SQL Injection in Throws SPAM Away <= 3.8.2 versions.
CVE-2026-81763 at the National Vulnerability Database