CVE Intelligence

Vulnerabilidades de Chirpstack

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Chirpstack: 1 registro(s), com severidade, exploração e correções.

Chirpstack 1

Somente exploradas (KEV) →

CVE-2026-71282 Média · 6.5 CWE-89 05/08/2026
ChirpStack SQLite Backend SQL Injection via Device Tag Key in ListDevices Filter
ChirpStack's SQLite-backend device tag filtering (chirpstack/src/storage/device.rs, in both get_count and list) interpolates the user-supplied tag KEY directly into a raw SQL fragment via Rust's format! macro , while only the tag VALUE is safely parameter-bound via Diesel's .bind.