Umami Software Application Umami Software vulnerabilities

CVE-2026-4317 [CRITICAL] CWE-89 CVE-2026-4317: SQL inyection (SQLi) vulnerability in Umami Software web application through an improperly sanitized SQL inyection (SQLi) vulnerability in Umami Software web application through an improperly sanitized parameter, which could allow an authenticated attacker to execute arbitrary SQL commands in the database.Specifically, they could manipulate the value of the 'timezone' request parameter by including malicious characters and SQL payload. The applicati