## https://sploitus.com/exploit?id=BE68A1FA-91D6-521A-8ACE-8B2BE012F9B0
# CVE-2026-72550 — Friendica Unauthenticated SQL Injection
**Unauthenticated stacked-query SQL injection in the photos endpoint in Friendica allows any visitor to run arbitrary SQL.**
| Field | Value |
|---|---|
| **CVE ID** | CVE-2026-72550 |
| **Product** | [Friendica](https://github.com/friendica/friendica) (self-hosted federated social network) |
| **Affected** | false`)
## Timeline
| Date | Event |
|---|---|
| 2026-07-07 | Vulnerability discovered and confirmed on local instance |
| 2026-08-11 | CVE-2026-72550 published via TuranSec CNA |
## Disclaimer
This tool is provided for authorized security testing and educational purposes only. Use it only against systems you own or have explicit written permission to test. The author assumes no liability for misuse.
## Credits
Discovered by [TuranSec](https://turansec.com)