Is CVE-2026-108474 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-108474?

CVE-2026-108474 has a CVSS v3 severity of CRITICAL (9.8).

Back

Description

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions