Threats·Cloud & SaaSCriticalA parameter taken from the request body is inserted SQL Injection Flaw CVE-2026-89310 DisclosedA parameter taken from the request body is inserted into a T-SQL statement without parameterization or escaping, allowing a remote attacker to execute…CST Newsroom14 Oct 20262 min read