CVE-2026-111718
Received Received - Intake

AipexBase SQL Injection via Order and Group Parameters

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: VulnCheck

Description
AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the order_by and group_by fields of the /api/data/invoke endpoint. Attackers can supply subqueries or EXTRACTVALUE and UPDATEXML functions that bypass the SqlGuard denylist and row-level security, reading other users' rows and tables.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-111718
EUVD
EUVD-2026-103010

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
kuafuai aipexbase 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

AipexBase has a SQL injection vulnerability in the /api/data/invoke endpoint. Attackers can inject malicious SQL queries through the order_by and group_by fields. This bypasses the SqlGuard denylist and row-level security, allowing access to other users' data and tables.

Detection Guidance

To detect this SQL injection vulnerability in AipexBase, monitor HTTP requests to the /api/data/invoke endpoint for suspicious parameters like order_by or group_by containing SQL keywords such as UNION, SELECT, EXTRACTVALUE, or UPDATEXML. Use network traffic analysis tools like Wireshark or tcpdump to inspect payloads. Enable application logs to track unusual query patterns or errors.

Impact Analysis

Attackers could read sensitive data from other users, including personal information or confidential records. They might also manipulate or delete data if the injected queries allow write operations. This could lead to data breaches or unauthorized access to critical systems.

Compliance Impact

This vulnerability likely violates GDPR and HIPAA by enabling unauthorized access to personal and health data. Organizations could face fines, legal penalties, and reputational damage due to non-compliance with data protection requirements.

Mitigation Strategies

Immediately update AipexBase to the latest commit or patch that fixes the SQL injection issue. Implement input validation and sanitization for order_by and group_by parameters. Use parameterized queries or an ORM to prevent SQL injection. Restrict database user permissions to limit access to sensitive data.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-111718. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart