CVE-2025-24290

Multiple Authenticated SQL Injection vulnerabilities found in UISP Application Version 2.4.206 and earlier could allow a malicious actor with low privileges to escalate privileges...

CVE-2025-24290

creationtimestamp| type| source ---|---|--- 2025-06-29 19:58:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19874 2025-06-29 23:29:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsrt6jk7f52u 2025-06-30 13:50:56+00:00| seen|...

CVE-2025-24290

CVE-2025-24290 affects UISP Application versions 2.4.206 and earlier. The dashboards and related components are vulnerable to multiple authenticated SQL Injection flaws that could enable a low-privilege user to escalate privileges. Exploitation status is not detailed in the provided documents. Ro...