{"uuid": "d640cd26-e33d-44ec-9621-32653b79fac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23980", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/45744", "content": "CVE-2026-23980\n\nImproper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an authenticated user with read access to conduct error-based SQL injection via the sqlExpression or where parameters.\n\nThis issue affects Apache Superset: before 6.0.0.\n\nUsers are recommended to upgrade to version 6.0.0, which fixes the issue.\n\nGitHub Link:\nhttps://github.com/oscar-mine/CVE-2026-23980-Exploit", "creation_timestamp": "2026-09-03T00:00:48.612155Z"}