CVE WatchAug 6, 2026

CVE-2026-34191

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via ap

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Aug 6, 2026 · Last modified: Aug 6, 2026 · CWE-89

EPSS · 30d

Not enough EPSS history yet.

Technical description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3

Official references

lists.apache.orghttps://lists.apache.org/thread/8xch90zogywwpo5wnsf4o088mkxy4qtf

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-664479.3 CRI

—

———Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.7h CVE-2026-655698.5 HIG

—

———Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions.7h CVE-2026-655478.5 HIG

—

———Subscriber SQL Injection in Creative Mail <= 1.6.9 versions.7h CVE-2026-655469.3 CRI

—

———Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.8h CVE-2026-655209.3 CRI

—

———Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.7h CVE-2026-655089.3 CRI

—

———Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.7h