CVE-2026-52470

A SQL injection vulnerability exists in Crocus version 1.3.44 . This flaw occurs through the RecordStateMapper.xml file and allows a remote attacker to escalate privileges by inserting malicious SQL statements into entry fields. This could potentially lead to unauthorized data access or administr...

CVE-2026-52469

SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the DeviceInfoMapper.xml file...

PT-2026-62087

Name of the Vulnerable Software and Affected Versions Crocus version 1.3.44 Description A SQL injection flaw allows a remote attacker to escalate privileges. This issue occurs through the RecordStateMapper.xml file. SQL injection is a technique where malicious SQL statements are inserted into ent...