A SQL injection vulnerability, tracked as CVE-2023-54400, was reportedly exploited on the same day its Common Vulnerabilities and Exposures (CVE) record was published, September 29, 2026. This rapid exploitation highlights the immediate threat posed by newly disclosed vulnerabilities.
The vulnerability's lifecycle shows that the CVE was reserved and published on September 29, 2026, with the first report of its exploitation also occurring on that date. This indicates no discernible "patch window" between public disclosure and active attacks.
While the U.S. federal CISA KEV (Known Exploited Vulnerabilities) catalog and the European Union's ENISA (EUVD) do not list CVE-2023-54400 as exploited, commercial research firm VulnCheck's KEV catalog did include it on September 29, 2026. The CIRCL aggregator, which mirrors other sources, also reflected this information.
The claim of same-day exploitation currently rests on a single catalog, VulnCheck's, without corroboration from a second independent source. Public exploitation evidence was reported on September 29, 2026, with links to original sources collected from VulnCheck and CIRCL. The specifics of the affected product or vendor, and the nature of the SQL injection, were not detailed in the available information.
