← Back to Vulnerability Reports CVE Intelligence

CVE-2026-5587

See advisory•MEDIUM · CVSS 6.3•No exploitation reported

What is CVE-2026-5587?

A vulnerability was identified in wbbeyourself MAC-SQL up to 31a9df5e0d520be4769be57a4b9022e5e34a14f4. This affects the function _execute_sql of the file core/agents.py of the component Refiner Agent. The manipulation leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS6.3 NVD 3.1
SeverityMEDIUM
ExploitationNo exploitation reported
EPSS<1% · P10
Triage statusNo Known Exploit
ActionSchedule for next cycle
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CWECWE-74
NVD published2026-04-05
NVD last modified2026-07-24

Timeline

  • 2026-04-05Published to the U.S. National Vulnerability Database (NVD)
  • 2026-07-24NVD record last updated

Affected product

See advisory

Remediation Steps

  1. Update Apache HTTP Server to version 2.4.63 or later during next scheduled maintenance.
  2. Ensure mod_security or equivalent WAF rules are active as additional defense.
  3. No emergency action required.

References

Referenced in our briefings & reports

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.