CVE-2026-52470

Crocus version 1.3.44 is affected by a SQL injection vulnerability that allows a remote attacker to escalate privileges . The root cause is located in the RecordStateMapper.xml file, where improper neutralization of special elements in SQL commands allows for the execution of malicious statements...

PT-2026-62087

Name of the Vulnerable Software and Affected Versions Crocus version 1.3.44 Description A SQL injection flaw allows a remote attacker to escalate privileges. This issue occurs through the RecordStateMapper.xml file. SQL injection is a technique where malicious SQL statements are inserted into ent...

CVE-2026-52469

SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the DeviceInfoMapper.xml file...