CVE-2026-8054 | dotCMS up to 26.04.28-02 Publish Audit API Endpoint /api/auditPublishing/get sql injection

A vulnerability has been found in dotCMS up to 26.04.28-02 and classified as critical. This affects an unknown part of the file /api/auditPublishing/get of the component Publish Audit API Endpoint. The manipulation leads to sql injection.

This vulnerability is referenced as CVE-2026-8054. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.