CyberSecBulletin

SocialEngine vulnerabilities

We track 2 vulnerabilities in SocialEngine products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 23, 2026.

2vulnerabilities
1critical
1high
0exploited
9.2average CVSS score

Latest SocialEngine vulnerabilities

  • 8.5 High severity

    SocialEngine: Server-Side Request Forgery

    CVE-2026-41461SocialEngine

    SocialEngine versions 7.8.0 and prior contain a blind server-side request forgery vulnerability in the /core/link/preview endpoint where user-supplied input passed via the uri request parameter is not sanitized before being used to construct outbound HTTP requ

  • 9.8 Critical severity

    SocialEngine: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2026-41460SocialEngine

    SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplied input passed via the text parameter is not sanitized before being incorporated into a SQL query. An unauthenticated re