{"cvss":9.3,"datePublished":"2026-10-29T00:00:00Z","dateUpdated":"2026-10-29T00:00:00Z","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YMC Filter allows SQL Injection.\n\nThis issue affects YMC Filter: from n/a through 3.11.5.","dueDate":"","id":"CVE-2026-54836","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"YMC Filter","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"ymc-22 filter_\\&_grids Improper Neutralization of Special Elements used in an SQL Command","vendor":"YMC"}