Miku Campaign: CVE-2026-59514 sqlmap SQLi against BuddyBoss members REST endpoint

Arnold Chan@slaz

•updated Sep 16, 2026•0•0•0

This rule detects SQL injection attempts targeting the BuddyBoss members REST endpoint, specifically identifying exploitation patterns associated with the 'sqlmap' tool. The rule monitors for specific URL parameters including 'member_type', 'search_terms', and 'scope' in combination with an 'sqlmap' user-agent, indicating an automated exploitation attempt against the application.