1 matches found
CVE-2026-2584: Improper Neutralization of Special Elements used in an SQL Command
A critical SQL Injection SQLi vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker AV:N/PR:N can exploit this flaw by sending specially crafted SQL queries through the login interface. Due to low attack complexity AC:L and the absence o...
9.3CVSS5.7AI score0.00635EPSS
SaveExploits0References2
20