CVE-2026-65874 — SQL injection via ORDER BY parameters in Apache Fineract Center and datatables endpoints

Apache Fineract versions up to and including 1.15.0 are affected by a vulnerability allowing an authenticated user with read access to centers or the targeted datatable to perform time-based blind SQL injection.