[HIGH] Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

PKSA-pmf2-z78s-582m CVE-2026-55416 GHSA-23rh-xw42-fq82

Affected package: pimcore/pimcore

Affected version: <11.5.18|>=12.0.0-RC1,<=12.3.9|>=2026.1.0,<=2026.1.5

Reported by:
GitHub