{"vulnerability": "CVE-2026-56287", "sightings": [{"uuid": "0d0a7f1b-ca6b-48e5-8e05-bbf834a204db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56287", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqo5leeaqi26", "content": "CVE-2026-56287: Apache Fineract: Boolean SQL Injection in Client Search API (orderBy parameter) leading to Local File Disclosure", "creation_timestamp": "2026-07-15T07:00:58.171824Z"}, {"uuid": "0dc95974-8c59-4361-a5cb-8022ebf36adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56287", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqorxo3uto2h", "content": "CVE-2026-56287 - Apache Fineract: Boolean SQL Injection in Client Search API (orderBy parameter) leading to Local File Disclosure\nCVE ID : CVE-2026-56287\n \n Published : July 15, 2026, 10:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : A boolean-based SQL Injection vulnerabil...", "creation_timestamp": "2026-07-15T13:05:46.044396Z"}, {"uuid": "93431518-de2e-42f3-822d-47456c3b1af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56287", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr4jatji7a2c", "content": "\ud83d\udccc CVE-2026-56287 - A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API (GET /api/v1/clients) in versions up to and including 1.14.0... https://www.cyberhub.blog/cves/CVE-2026-56287", "creation_timestamp": "2026-07-21T00:07:06.450050Z"}, {"uuid": "f60d8ba8-7310-4159-996e-a1aeabdc8459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56287", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr5vefxyck2z", "content": "Three Apache Fineract SQL injection flaws (CVE-2026-57821, CVE-2026-56287, CVE-2026-35152) let authenticated users exfiltrate data. Upgrade to 1.15.0.\n\n#ApacheFineract #SQLInjection #CVE #CoreBanking #InfoSec", "creation_timestamp": "2026-07-21T13:16:31.355815Z"}]}