cveboard RSS feed

CVE-2026-111402

Critical

Tribulant Software Newsletters

What to do

Fixed version listed

Plain text

Affected products

ProductAffectedFixed in
Tribulant Software NewslettersOnly in the CVE record4.18.2

The CVE record lists 1 range this page cannot state exactly.

Scores and signals

Exploitation
No known exploitation
Severity
Critical, CVSS 9.3 (v3.1, scored by Patchstack)
Weakness
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Vendor
Tribulant Software, Newsletters

Timeline

  1. First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.

Sources