CVE-2026-115738

SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote…

Risk score: 39/100
CVSS: 6.5 v3.1
Published: 5 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is: SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated attacker to inject SQL queries without sanitization or parameterized queries.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Clear

CVSS 6.5 medium

References

https://support.trellix.com/s/article/000015949

Original description

SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated attacker to inject SQL queries without sanitization or parameterized queries.

Last activity 5 Nov 2026. Patch Forecast updates every hour.