CVE-2026-108474

CVSS 9.8 (critical) · published 2026-10-10

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions

Weakness: CWE-89

Source: NVD CVE-2026-108474

References

• https://www.jetbrains.com/privacy-security/issues-fixed/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.