Lucene search
+L

3 matches found

NVD
NVD
•added 2026/05/27 9:16 a.m.•37 views

CVE-2026-40839

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getComponentScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS0.00445EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/27 7:57 a.m.•14 views

CVE-2026-40839 Authenticated SQLi in getComponentScalings function

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getComponentScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS6AI score0.00445EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•2 views

CVE-2026-40839: Improper Neutralization of Special Elements used in an SQL Command

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getComponentScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS5.9AI score0.00445EPSS
SaveExploits0References2
Rows per page
Query Builder