{"uuid": "8f6be0b3-f06a-450c-90fc-ea3ee71408dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23980", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45744", "content": "CVE-2026-23980\n\nImproper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an authenticated user with read access to conduct error-based SQL injection via the sqlExpression or where parameters.\n\nThis issue affects Apache Superset: before 6.0.0.\n\nUsers are recommended to upgrade to version 6.0.0, which fixes the issue.\n\nGitHub Link:\nhttps://github.com/oscar-mine/CVE-2026-23980-Exploit", "creation_timestamp": "2026-09-02T06:00:13.371746Z"}