Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/02 12:00 a.m.•1 views

CVE-2026-2584: Improper Neutralization of Special Elements used in an SQL Command

A critical SQL Injection SQLi vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker AV:N/PR:N can exploit this flaw by sending specially crafted SQL queries through the login interface. Due to low attack complexity AC:L and the absence o...

9.3CVSS5.7AI score0.00635EPSS
SaveExploits0References2
Rows per page
Query Builder