CVE-20XX-?

Sqlite CVEs.

Published CVEs affecting Sqlite, ranked by exploit odds.

1 CVEs · updated 2026-11-06 06:22 UTC

Reset all
  1. CVE-2026-119586

    SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqlite_schema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .system line, executing OS commands when victims pipe .recover output into sqlite3.

    Injection Server Sqlite

    8.5 HIGH 2% exploit odds No fix listed

All CVEs affecting Sqlite that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.