CVE-2026-59514

The Buddyboss Platform versions up to 3.0.5 are vulnerable to an unauthenticated SQL injection, allowing attackers to execute arbitrary SQL queries on the database. This critical vulnerability could lead to unauthorized data access or manipulation, posing significant risks to user data integrity and confidentiality. Organizations using affected versions should prioritize immediate remediation to mitigate potential exploitation.