EXPOSURES › CVE-2026-34400
CVE-2026-34400
CRITICAL
DETAIL
SourceNVD · cve
Published2026-03-31
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-34400 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
DESCRIPTION
Alerta is a monitoring tool. Prior to version 9.1.0, the Query string search API (q=) was vulnerable to SQL injection via the Postgres query parser, which built WHERE clauses by interpolating user-supplied search terms directly into SQL strings via f-strings. This issue has been patched in version 9.1.0.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.