Get real-time updates on Telegram

Hibernate vulnerable to SQL Injection

CVE-2026-0603 affects org.hibernate:hibernate-core. CVSS base score 8.3 (HIGH, Vendor/CNA). EPSS 0.0087 (percentile 0.57394), scored 2026-10-04. Affected range: >= 5.2.8, < 5.3.38. Fixed version: 5.3.38.

Published 2026-10-06 00:26:06.163499+00:00

CVE

CVE-2026-0603

CWE

CWE-89

Product

org.hibernate:hibernate-core

CCR priority

33.4 /100 (P4)

CVSS

8.3 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L · Vendor/CNA

EPSS

0.0087 · percentile 0.57394 · 2026-10-04

KEV

no

Affected products

• org.hibernate:hibernate-core · >= 5.2.8, < 5.3.38 · Fixed version: 5.3.38

Provenance

• NVD CVE API 2.0 · Source record · observed 2026-10-06 00:26:03.168174+00:00 UTC
• GitHub Advisory Database · Source record · observed 2026-10-06 01:14:31.382806+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-0603.html