Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YMC Filter allows SQL Injection.
This issue affects YMC Filter: from n/a through 3.11.5.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| YMC | YMC Filter | ≤ 3.11.5 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- YMC Filter - SQL Injection http/cves/2026/CVE-2026-54836.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.