{"uuid": "5936f516-d0f4-4204-8856-9f22d2dd19ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79752", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117289453047176290", "content": "CVE-2026-79752: CakePHP <4.5.12, 4.6.0-4.6.4, 5.0.0-5.1.8, 5.2.0-5.2.13, 5.3.0-5.3.6 FunctionsBuilder SQL injection risk! CRITICAL severity \u2014 patch ASAP or avoid user input in $dataType, $part, $unit. https://radar.offseq.com/threat/database-cakephp-multiple-methods-in-functionsbuilder-vulnerable-to-sql-injection-cve-2026-79752-16b04fe3ca4b5527 #OffSeq #CakePHP #SQLi #Infosec", "creation_timestamp": "2026-09-18T01:30:24.004434Z"}