Vulnerability Bulletins |
CVE-2026-73300 |
|
| Affected software | MYSQL |
| Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious SQL commands through user input fields, leading to complete database compromise. This vulnerability is fixed in 3.40.0. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-73300 | |