CRITICAL Published Oct 28, 2026

CVE-2026-115607

CVE-2026-115607 published: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd Favorite DXP ToolKit dxp-toolkit allows SQL Injection.This issue affects DXP ToolKit: from n/a through 2.0.1.

View full NVD advisory → ← Back to CVE watch

CVE-2026-115607

Related reading