CVE-2026-52470

Crocus version 1.3.44 is affected by a SQL injection vulnerability that allows a remote attacker to escalate privileges . The root cause is located in the RecordStateMapper.xml file, where improper neutralization of special elements in SQL commands allows for the execution of malicious statements...