Skip to content
OpenAdvisories
High · 7.1 CVE-2026-115738 EUVD-2026-117530GHSA-cfhq-7rhq-fm33

SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated attacker to inject SQL quer…

Published Nov 5, 2026 · Updated Nov 5, 2026 · Assigned by trellix

Vendor: Trellix Product: DLP on-prem extensions

Description

SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated attacker to inject SQL queries without sanitization or parameterized queries.

Affected products

VendorProductAffectedFixed
Trellix DLP on-prem extensions 11.13.1 and earlier —

References