TI-2026-75504 CVE-2026-111718 · GHSA-hcjf-66qr-8j38SQL injection in AipexBase via /api/data/invokePriority MEDIUM 64AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the order_by and group_by fields of the /api/data/invoke endpoint.CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00327 · Published 2026-10-16 · No fix listed CWE-89