Skip to content
OpenAdvisories

Vendor

CiviCRM

1 known vulnerabilities.

Products

CiviCRM 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-72558

    CiviCRM CiviCRM - SQL Injection

    An SQL injection vulnerability in CiviCRM through 6.18.alpha1 allows authenticated staff to read the entire database via the contact search RLIKE clause. The clause concatenates a user-supplied value into the SQL query without sanitization. An attacker with s…

    CiviCRM CiviCRM civicrm civicrm Debian Ubuntu