{"vulnerability": "CVE-2026-11822", "sightings": [{"uuid": "921b8c32-8476-40d0-a87e-08a79a341c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnv5qarrqa2v", "content": "CVE-2026-11822 - SQLite before 3.53.2 Memory Corruption in FTS5 Extension\nCVE ID : CVE-2026-11822\n \n Published : 9. Juni 2026 20:16 | 20\u00a0Minuten ago\n \n Description : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that all...", "creation_timestamp": "2026-06-09T21:36:45.745775Z"}, {"uuid": "c26119e1-7de9-4c0b-82d2-f203835c14d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mnva7gqqpy2r", "content": "SQLite 3.53.2\u672a\u6e80\u306eFTS5\u62e1\u5f35\u6a5f\u80fd\u306b\u30e1\u30e2\u30ea\u7834\u640d\u306e\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u7d30\u5de5\u3055\u308c\u305f\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3067\u30d7\u30ed\u30bb\u30b9\u30af\u30e9\u30c3\u30b7\u30e5\u3084\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-11822 CVSS 7.8 | HIGH", "creation_timestamp": "2026-06-09T22:21:02.733219Z"}, {"uuid": "e4dd16d1-dd64-4de8-b84b-486385d82159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mold2mf3fk2b", "content": "\ud83d\udee1\ufe0f SQLite3 no #SUSE: duas vulnerabilidades cr\u00edticas no FTS5 (CVE-2026-11822 e CVE-2026-11824) foram corrigidas.  Saiba mais: -> tinyurl.com/2wyu89a4", "creation_timestamp": "2026-06-18T17:10:37.845459Z"}, {"uuid": "8d307776-ebdc-45d5-b832-d5fbc3497d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mold2n6a3k2b", "content": "\ud83d\udee1\ufe0f SQLite3 no #SUSE: duas vulnerabilidades cr\u00edticas no FTS5 (CVE-2026-11822 e CVE-2026-11824) foram corrigidas.  Saiba mais: -> tinyurl.com/2wyu89a4", "creation_timestamp": "2026-06-18T17:10:38.529953Z"}, {"uuid": "f92af93e-f875-4625-8299-92e56eb39ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mozv7uhpms22", "content": " \ud83d\udea8 SUSE-SU-2026:2527-1: sqlite3 3.53.2 (IMPORTANTE). Corrige CVE-2026-11822/24 - RCE via FTS5 (CVSS 8.5).         Saiba mais: -> tinyurl.com/3scsdeps  #SUSE", "creation_timestamp": "2026-06-24T12:13:28.465700Z"}, {"uuid": "f39c2570-27af-4e36-827f-fd46995a271e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://gist.github.com/alon710/5bb0eb27a06cd11327cf90d91e185d49", "content": "# CVE-2026-11822: CVE-2026-11822: Memory Corruption and Buffer Overflow in SQLite FTS5 Extension\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-06-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-11822\n\n## Summary\nA memory corruption vulnerability exists in the FTS5 (Full-Text Search 5) extension of SQLite prior to version 3.53.2. An attacker can construct a malicious database file containing corrupt FTS5 page data. Querying this database triggers out-of-bounds reads and heap-based buffer overflows, potentially causing a crash or arbitrary code execution.\n\n## TL;DR\nA vulnerability in SQLite FTS5 allows local attackers to cause memory corruption and arbitrary code execution by querying a maliciously crafted database file.\n\n## Technical Details\n\n- **CWE ID**: CWE-122, CWE-125\n- **Attack Vector**: Local\n- **CVSS**: 7.8 (High)\n- **EPSS Score**: 0.00175\n- **Exploit Status**: None / Proof-of-Concept not publicly available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Node.js\n- Echo framework\n- Debian Linux\n- Ubuntu Linux\n- Alma Linux\n- Photon OS\n- openSUSE\n- Chromium-based browsers\n- **SQLite**: < 3.53.2 (Fixed in: `3.53.2`)\n\n## Mitigation\n\n- Upgrade SQLite to version 3.53.2 or later\n- Compile SQLite with -DSQLITE_ENABLE_FTS5=0 to disable the vulnerable module\n- Implement sandbox controls on processes loading SQLite databases\n\n**Remediation Steps:**\n1. Identify all applications compiling or dynamically linking SQLite\n2. Apply the official patch or upgrade to SQLite 3.53.2\n3. Verify FTS5 compilation flags if upgrade is not possible\n\n## References\n\n- [Official SQLite Release Log (v3.53.2)](https://sqlite.org/releaselog/3_53_2.html)\n- [SQLite Branch 3.53 Patch Commit (061febcf41ca)](https://sqlite.org/src/info/061febcf41ca)\n- [SQLite Trunk Patch Commit (4a5ad516ea93)](https://sqlite.org/src/info/4a5ad516ea93)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension)\n- [Wiz Vulnerability Database Profile](https://www.wiz.io/vulnerability-database/cve/cve-2026-11822)\n- [CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-11822)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-11822) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T07:58:49.103360Z"}, {"uuid": "5ba567f5-bad3-4256-90b4-2bfaa68c9ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://gist.github.com/alon710/ed8bc6e2d4b9ba716afc36a52ec2f0d1", "content": "# CVE-2026-11822: CVE-2026-11822: Memory Corruption and Buffer Overflow in SQLite FTS5 Extension\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-06-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-11822\n\n## Summary\nA memory corruption vulnerability exists in the FTS5 (Full-Text Search 5) extension of SQLite prior to version 3.53.2. An attacker can construct a malicious database file containing corrupt FTS5 page data. Querying this database triggers out-of-bounds reads and heap-based buffer overflows, potentially causing a crash or arbitrary code execution.\n\n## TL;DR\nA vulnerability in SQLite FTS5 allows local attackers to cause memory corruption and arbitrary code execution by querying a maliciously crafted database file.\n\n## Technical Details\n\n- **CWE ID**: CWE-122, CWE-125\n- **Attack Vector**: Local\n- **CVSS**: 7.8 (High)\n- **EPSS Score**: 0.00175\n- **Exploit Status**: None / Proof-of-Concept not publicly available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Node.js\n- Echo framework\n- Debian Linux\n- Ubuntu Linux\n- Alma Linux\n- Photon OS\n- openSUSE\n- Chromium-based browsers\n- **SQLite**: < 3.53.2 (Fixed in: `3.53.2`)\n\n## Mitigation\n\n- Upgrade SQLite to version 3.53.2 or later\n- Compile SQLite with -DSQLITE_ENABLE_FTS5=0 to disable the vulnerable module\n- Implement sandbox controls on processes loading SQLite databases\n\n**Remediation Steps:**\n1. Identify all applications compiling or dynamically linking SQLite\n2. Apply the official patch or upgrade to SQLite 3.53.2\n3. Verify FTS5 compilation flags if upgrade is not possible\n\n## References\n\n- [Official SQLite Release Log (v3.53.2)](https://sqlite.org/releaselog/3_53_2.html)\n- [SQLite Branch 3.53 Patch Commit (061febcf41ca)](https://sqlite.org/src/info/061febcf41ca)\n- [SQLite Trunk Patch Commit (4a5ad516ea93)](https://sqlite.org/src/info/4a5ad516ea93)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension)\n- [Wiz Vulnerability Database Profile](https://www.wiz.io/vulnerability-database/cve/cve-2026-11822)\n- [CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-11822)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-11822) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T07:59:30.709028Z"}, {"uuid": "170bc349-810e-4320-97af-8ce206bbcd6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq533cv3km2t", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-11822 impacts sqlite-libs in 20 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/590\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-08T12:00:56.610381Z"}, {"uuid": "71019fb2-e9ff-489c-a9a5-a3f0f8c5e0b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqc3zkf2gn2f", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-11822 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/590 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-07-10T12:01:09.749275Z"}]}