VULNERABILITY INTELLIGENCE

CVE-2026-48114

CVSS score9.8 CRITICAL

EPSS probability0.37%

CISA KEVNot currently listed

Published2026-06-15

Last modified2026-10-25

Description

Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.0.0 and and above contain an unauthenticated SQL injection in the /harvesterRegistration endpoint. HarvesterRegistration.dbInsert() builds an INSERT against HARVEST_SITE_SCHEDULE via string conc…