CVE-2026-71298
MEDIUM
NVD
CVSS Score
6.4
Severity
MEDIUM
Published
Oct 05, 2026
Vendor
unknown
Description
A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the `orderBy` query parameter of its REST API list endpoints. This flaw, which does not require authentication, allows for read-only blind extraction of data from the database.