CVE-2026-18859 ESAFENET CDG usbkey;logindojojs sql injection

A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...

CVE-2026-18859

CVE-2026-18859 affects ESAFENET CDG (up to 20260615). The vulnerability is tied to an unknown function in the file /CDGServer3/ukey/usbkey;logindojojs, where manipulation of the argument keyid leads to SQL injection. Attacks may be performed remotely, and a public exploit is reported as available...

CVE-2024-9560

CVE-2024-9560 affects ESAFENET CDG V5. The vulnerable component is the delCatelogs function in /CDGServer3/document/Catelogs;logindojojs?command=DelCatelogs, where manipulating the argument id leads to SQL injection. Multiple sources confirm remote exploitability and public disclosure, with CVSS ...