{"action":"Upgrade mautic/core to 5.2.10 or later.","affected":[{"fixed":"5.2.10","introduced":"2.10.0"},{"fixed":"6.0.8","introduced":"6.0.0-alpha"},{"fixed":"7.0.1","introduced":"7.0.0-alpha"}],"component":"mautic/core","cve_ids":["CVE-2026-3105"],"ecosystem":"Packagist","epss":0.00329,"exploited":false,"fixed_versions":["5.2.10","6.0.8","7.0.1"],"ghsa_id":"GHSA-r5j5-q42h-fc93","id":"tcs_01M5KF7XE4B48AT86GMCHH1EJ1","modified_at":"2026-02-25T19:41:37.356855Z","published_at":"2026-02-25T19:28:39Z","references":["https://osv.dev/vulnerability/GHSA-r5j5-q42h-fc93","https://github.com/mautic/mautic/security/advisories/GHSA-r5j5-q42h-fc93","https://nvd.nist.gov/vuln/detail/CVE-2026-3105","https://github.com/mautic/mautic","https://github.com/mautic/mautic/releases/tag/5.2.10","https://github.com/mautic/mautic/releases/tag/6.0.8","https://github.com/mautic/mautic/releases/tag/7.0.1"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-r5j5-q42h-fc93","url":"https://osv.dev/vulnerability/GHSA-r5j5-q42h-fc93"}],"summary":"Mautic is Vulnerable to SQL Injection through Contact Activity API Sorting"}