{"action":"Upgrade mautic/core to 5.2.11 or later.","affected":[{"introduced":"2.6.0","last_affected":"4.4.13"},{"fixed":"5.2.11","introduced":"5.0.0"},{"fixed":"6.0.9","introduced":"6.0.0"},{"fixed":"7.1.2","introduced":"7.0.0"}],"component":"mautic/core","cve_ids":["CVE-2026-4776"],"ecosystem":"Packagist","epss":0.00224,"exploited":false,"fixed_versions":["5.2.11","6.0.9","7.1.2"],"ghsa_id":"GHSA-fcmw-wx57-9p75","id":"tcs_01M5KF1Q09K2PWYP34MZZF5T65","modified_at":"2026-09-10T03:50:51.891807048Z","published_at":"2026-07-02T19:25:18Z","references":["https://osv.dev/vulnerability/GHSA-fcmw-wx57-9p75","https://github.com/mautic/mautic/security/advisories/GHSA-fcmw-wx57-9p75","https://nvd.nist.gov/vuln/detail/CVE-2026-4776","https://github.com/mautic/mautic"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-fcmw-wx57-9p75","url":"https://osv.dev/vulnerability/GHSA-fcmw-wx57-9p75"}],"summary":"Mautic has SQL Injection in API Contact Filtering"}