Vulnerability details
CVE-2026-1287
Red Hat Ansible Automation Platform 2Red Hat Satellite 6Red Hat Update Infrastructure 4 for Cloud Providersdjangoproject Django
Potential SQL injection in column aliases via control characters
CVSS 3.1
8.3High
Official description
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. `FilteredRelation` is subject to SQL injection in column aliases via control characters, using a suitably crafted dictionary, with dictionary expansion, as the `**kwargs` passed to `QuerySet` methods `annotate()`, `aggregate()`, `extra()`, `values()`, `values_list()`, and `alias()`. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Solomon Kebede for reporting this issue.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 5.4Medium | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N |
| 8.3High | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Satellite 6 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Update Infrastructure 4 for Cloud Providers | All | CVEProject cvelistV5 (CNA) |
| djangoproject | Django | 4.2 ≤ v < 4.2.28 | CVEProject cvelistV5 (CNA) |
| djangoproject | Django | 5.2 ≤ v < 5.2.11 | CVEProject cvelistV5 (CNA) |
| djangoproject | Django | 6.0 ≤ v < 6.0.2 | CVEProject cvelistV5 (CNA) |
References and advisories
15- https://docs.djangoproject.com/en/dev/releases/security/ vendor-advisory
- https://groups.google.com/g/django-announce mailing-list
- https://www.djangoproject.com/weblog/2026/feb/03/security-releases/ vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-1287 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2436339 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1287.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:3959 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:5971 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3958 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:5970 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:14835 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3962 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3960 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2694 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6291 vendor-advisoryx_refsource_REDHAT
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-02-03
- Last updated
- 2026-07-15
- State
- Published
- Assigner (CNA)
- DSF
Exploit prediction (EPSS)
0.84%
Probability of exploitation in 30 days
58.1%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')