CVE-2026-108821
Medium
Description
A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of the file internal/utils/inject.go of the component SQL Validator. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.8.2 is recommended to address this issue. The identifier of the patch is d7ccd5ba517cc3968e6d5000a2ab0f4b51ef1dda. It is recommended to upgrade the affected component.
SeverityMedium
CVSS6.3
Exploit probability—
ProductTencent Weknora
PublishedOct 12, 2026
First seenOct 12, 2026
Weakness typeCWE-89SQL injectionCWE-74Injection
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tencent weknora | 0.8.0, 0.8.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.