Peerbanhelper
Monthly
Authenticated SQL injection in PeerBanHelper versions 5.0.0 through releases before 9.3.15 enables a high-privileged web API user to read arbitrary data from the configured SQLite, MySQL, or PostgreSQL database by supplying an unrecognized field value to the /api/statistic/analysis/field endpoint. Exploitation requires valid admin-panel credentials (CVSS PR:H) and reachable API access, with no user interaction needed. CVE-2026-62362 is rated medium severity (CVSS 4.9), is fixed in 9.3.15, and has no public exploit identified at time of analysis.
Authenticated SQL injection in PeerBanHelper versions 5.0.0 through releases before 9.3.15 enables a high-privileged web API user to read arbitrary data from the configured SQLite, MySQL, or PostgreSQL database by supplying an unrecognized field value to the /api/statistic/analysis/field endpoint. Exploitation requires valid admin-panel credentials (CVSS PR:H) and reachable API access, with no user interaction needed. CVE-2026-62362 is rated medium severity (CVSS 4.9), is fixed in 9.3.15, and has no public exploit identified at time of analysis.