A vulnerability was found in PowerJob 5.1.0/5.1.1/5.1.2. It has been classified as critical. Impacted is an unknown function of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/InstanceController.java of the component detailPlus Endpoint. The manipulation of the argument customQuery leads to sql injection.
This vulnerability is referenced as CVE-2026-5736. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
The project was informed of the problem early through an issue report but has not responded yet.
