UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-64618

Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fineract (through version 1.15.0). The vulnerability affects the outStandingAmountPercentageCondition parameter of the /fineract-provider/api/v1/search/advance HTTP API endpoint, allowing SQL injection due to insufficient input neutralization. Users are recommended to upgrade to version 1.16.1, which will fix the issue.

Properties

Last source: NVD
Nvd fetched at: 2026-10-30T12:00:36.255185+00:00
Cve id: CVE-2026-64618
First seen by Signal: 2026-10-30T12:01:54+00:00
Retrieved at: 2026-10-30T12:01:54+00:00
Published at: 2026-10-30T09:17:15.337
Last modified: 2026-10-30T10:16:55.190

Related Entities (1)

HAS_WEAKNESS (1)

→[Weakness]Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Explore deeper with Ninja Signal's threat intelligence graph

Search in Spektr Open Signal Desktop