Description
A specially crafted malformed search query could return results from outside a user's organization. Log analysis of runZero's hosted environment found only testing of the issue and no adversary traffic. This issue was fixed in version 5.1.261013.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| runZero | Platform | < 5.1.261013.1 | 5.1.261013.1 |
References
- https://www.runzero.com/advisories/runzero-search-sqli-cve-2026-110265 vendor-advisory
- https://help.runzero.com/docs/release-notes/#512610131 release-notes