{"uuid": "3e5cacc8-d48d-4c4d-aa55-6f5a48ede629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23980", "type": "seen", "source": "https://t.me/cve0day/365", "content": "CVE-2026-23980\n\nImproper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an authenticated user with read access to conduct error-based SQL injection via the sqlExpression or where parameters.\n\nThis issue affects Apache Superset: before 6.0.0.\n\nUsers are recommended to upgrade to version 6.0.0, which fixes the issue.\n\nGitHub Link:\nhttps://github.com/oscar-mine/CVE-2026-23980-Exploit", "creation_timestamp": "2026-08-27T15:00:09.148463Z"}