A public proof-of-concept exploit has been released for CVE-2026-23980, a SQL injection vulnerability affecting Apache Superset versions before 6.0.0. The flaw could allow authenticated users with read-level access to trigger error-based SQL injection through specific application parameters. Apache Superset is an open-source data exploration and visualization platform widely used to build dashboards, query databases, and […]
This article has been indexed from Cyber Security News
Read the original article: