THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-48528 (CRITICAL 9.8) — Metacat is data repository software that helps researchers preserve, share, and discover data. Metacat versions 2.0.0 through 3.4.0 contain an unauthenticated SQL injection vulnerability in the `/cn/v1/object` and `/cn/v2/object` REST API endpoints due to unsanitized user input t

[NVD] CVE-2026-48528 (CRITICAL 9.8) — Metacat is data repository software that helps researchers preserve, share, and discover data. Metacat versions 2.0.0 through 3.4.0 contain an unauthenticated SQL injection vulnerability in the `/cn/v1/object` and `/cn/v2/object` REST API endpoints due to unsanitized user input t

lownvdPublished 2026-08-14

CVE-2026-48528 CVSS: 9.8 CRITICAL Published: 2026-08-14T18:17:27.993

Metacat is data repository software that helps researchers preserve, share, and discover data. Metacat versions 2.0.0 through 3.4.0 contain an unauthenticated SQL injection vulnerability in the `/cn/v1/object` and `/cn/v2/object` REST API endpoints due to unsanitized user input that can be passed through to the backend SQL datab

MITRE ATT&CK techniques

VulnerabilitiesT1588.006

Indicators of compromise

CVE-2026-48528cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-48528