Apache Fineract

Search everything

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 30, 2026
Last mentioned1d ago

Timeline

2 articles · newest first

Apache Fineract through 1.15.0 has SQL injection in ORDER BY (CVE-2026-65874)

Caller-supplied orderBy, sortOrder and related parameters are concatenated on Center and datatable read APIs.

oss-securityOct 30, 03:00 UTC · 1d agoVulnerability 2 sourcesCVE-2026-658741

Apache Fineract Search API SQL injection fixed scope unclear (CVE-2026-64618)

The flaw is in outStandingAmountPercentageCondition on the advanced search HTTP endpoint through version 1.15.0.

oss-securityOct 30, 02:58 UTC · 1d agoVulnerability 2 sourcesCVE-2026-646181

Related CVEs

by mentions

CVE-2026-65874—
Authenticated SQL injection in Apache Fineract through 1.15.0
published 17h agoApache Fineract
CVE-2026-64618—
SQL injection in Apache Fineract Search API through 1.15.0
published 17h agoApache Fineract

Appears with

Apachevendor · 2

Entities are extracted by the model from each article. First seen Oct 30, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.