Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/27 7:53 a.m.36 views

CVE-2026-40827 Authenticated SQLi in _RemoveRequest function

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the RemoveRequest function due to improper neutralization of special elements in a SQL DELETE command allowing for reading the whole database and deleting entries in a non critical table. This can resu...

7CVSS0.00295EPSS
SaveExploits0References1
Rows per page
Query Builder