CVE-2026-88402
A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injecting crafted SQL statements.
- Published Sep 21, 2026
- CVSS 9.8 critical
- 0.5% chance of exploitation in the next 30 days (EPSS)