Corteza CVE-2026-6093

Upgrade Corteza to a patched version beyond 2024.9.8 once available from the Cortezaproject maintainers (check https://github.com/cortezaproject/corteza for release notes). In the interim, restrict access to Compose record filtering functionality to trusted administrators only, and audit which user accounts have permissions to create or modify filter parameters. Review database user roles to ensure the application account used by Corteza has only minimal required permissions (least privilege) rather than administrative rights; this limits damage from successful SQL injection. Disable or restrict access to the meta field filtering feature if it is not essential to business operations, which eliminates the attack surface entirely. Monitor database query logs for suspicious SQL patterns or syntax errors that may indicate exploitation attempts.