CVE-2026-81676 Multiple Vulnerabilities in TOOOLS' iSquad

A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the limitvideos parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting SQL syntax into this parameter, a remote attacker can cause SQL syntax errors and...

CVE-2026-81676

CVE-2026-81676 is an error-based SQL injection in TOOOLS' iSquad , affecting the endpoint /ws/apitribuna/ultimosVideos. The limit_videos parameter is directly concatenated into a MariaDB SQL query without sanitization or parameterization, allowing a remote, unauthenticated attacker to inject SQL ...