CVE-2026-2397 SQLi in AdamPOS' MobilMen 20T

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Adam Retail Automation Ltd. MobilMen 20T allows SQL Injection. This issue affects MobilMen 20T: from v3 through 10072026. NOTE: The vendor was contacted early about this disclosure but did not...

CVE-2026-2397

CVE-2026-2397 describes an SQL injection in Adam Retail Automation Ltd.’s MobilMen 20T. Affected: MobilMen 20T from version v3 through 10072026. Root cause: improper neutralization of special elements used in an SQL command. Impact is high across confidentiality, integrity, and availability (CVSS...