Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:27 p.m.•21 views

CVE-2026-40821

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

6.9CVSS5.8AI score0.00476EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/27 8:16 a.m.•49 views

CVE-2026-40821

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

6.9CVSS0.00476EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/27 7:49 a.m.•49 views

EUVD-2026-32125

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

6.9CVSS5.9AI score0.00476EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/27 7:49 a.m.•20 views

CVE-2026-40821

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

6.9CVSS5.9AI score0.00476EPSS
SaveExploits0References2Affected Software4
Vulnrichment
Vulnrichment
•added 2026/05/27 7:49 a.m.•12 views

CVE-2026-40821 Authenticated SQLi in getAccountByID function

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

6.9CVSS6AI score0.00476EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/27 7:49 a.m.•48 views

CVE-2026-40821

CVE-2026-40821 describes an unauthenticated SQL injection in the getAccountByID function allowing a high-privilege remote attacker to exfiltrate or disclose confidential data. The flaw arises from improper neutralization of special elements in a SQL SELECT command, leading to total confidentialit...

6.9CVSS6AI score0.00476EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•6 views

CVE-2026-40821: Improper Neutralization of Special Elements used in an SQL Command

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

6.9CVSS5.8AI score0.00476EPSS
SaveExploits0References2
Rows per page
Query Builder