Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:27 p.m.•23 views

CVE-2026-40821

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

6.9CVSS6AI score0.00281EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/27 8:16 a.m.•54 views

CVE-2026-40821

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

6.9CVSS0.00281EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/27 7:49 a.m.•54 views

EUVD-2026-32125

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

6.9CVSS5.9AI score0.00281EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/27 7:49 a.m.•15 views

CVE-2026-40821 Authenticated SQLi in getAccountByID function

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

6.9CVSS6AI score0.00281EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/27 7:49 a.m.•24 views

CVE-2026-40821

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

6.9CVSS5.9AI score0.00281EPSS
SaveExploits0References2Affected Software4
CVE
CVE
•added 2026/05/27 7:49 a.m.•58 views

CVE-2026-40821

CVE-2026-40821 describes an unauthenticated SQL injection in the getAccountByID function allowing a high-privilege remote attacker to exfiltrate or disclose confidential data. The flaw arises from improper neutralization of special elements in a SQL SELECT command, leading to total confidentialit...

6.9CVSS6AI score0.00281EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•11 views

CVE-2026-40821: Improper Neutralization of Special Elements used in an SQL Command

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

6.9CVSS5.8AI score0.00281EPSS
SaveExploits0References2
Rows per page
Query Builder