TI-2026-36641 CVE-2026-49491 · GHSA-w2ff-cx7w-3pwfPixa Bank 2.0 SQL Injection via agence-ajax.php APIPriority HIGH 77Pixa Bank 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract sensitive data by injecting SQL code into the 'rib' parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00344 · Published 2026-06-01 · No fix listed CWE-89