CVE-2026-34191

Опубликовано: 06 авг. 2026

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.

This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3

Ссылки

https://lists.apache.org/thread/8xch90zogywwpo5wnsf4o088mkxy4qtf
Mailing List
Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/08/06/10
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:apr-util:*:*:*:*:*:*:*:*

Версия от 1.6.0 (включая) до 1.6.3 (включая)

EPSS

Процентиль: 29%

0.00362

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVE-2026-34191

CVSS3: 9.1

ubuntu

13 дней назад

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3

CVE-2026-34191

CVSS3: 8.1

redhat

13 дней назад

CVE-2026-34191

msrc

9 дней назад

Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle

CVE-2026-34191

CVSS3: 9.1

debian

13 дней назад

Improper Neutralization of Special Elements used in an SQL Command ('S ...

GHSA-39fj-527g-2hph

CVSS3: 9.1

github

13 дней назад

EPSS

Процентиль: 29%

0.00362

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-89