CVE-2026-25076 — Anchore Enterprise GraphQL Reports API SQL injection
Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API. An authenticated attacker that is able to access the GraphQL API cou…
Published: 2026-03-12 · CVSS: 8.5 · CVSS 4.0
Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API. An authenticated attacker that is able to access the GraphQL API could execute arbitrary SQL instructions resulting in modifications to the data contained in the Anchore Enterprise database.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7