CVE-2026-18970: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected element is an unknown function of the file /dm/dispatch/user/findAll. Executing a manipulation of the argument Name can lead to sql injection. It is possible to launch the attack...

PT-2026-68365

Name of the Vulnerable Software and Affected Versions Rongzhitong Visual Integrated Command and Dispatch Platform versions prior to 20260617 Description A SQL injection flaw exists that allows remote attackers to execute unauthorized database queries. The issue occurs within an unknown function o...