HIGHCVSS v4 8.7Vulnerability
CVE-2026-123087
SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JSON object containing user-supplied information and concatenates it into an SQL statement without properly sanitising the input. This allows the original query to be altered via malicious input, causing the database to return unexpected information.
Properties
- Epss score
- 0.00344
- First seen
- 2026-11-06T09:30:48+00:00
- Cvss score
- 8.7
- Last seen
- 2026-11-06T09:30:48+00:00
- Euvd assigner
- INCIBE
- Retrieved at
- 2026-11-07T06:44:44+00:00
- Src batch id
- euvd-20261106T133401Z-6f1d7b
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-118028
- Score
- 8.7
- Euvd base score version
- 4.0
- Fetched at
- 2026-11-06T13:34:21+00:00
- Euvd vendor
- Atmira
- Cvss vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- First seen by Signal
- 2026-11-06T10:21:50+00:00
- Euvd base score
- 8.7
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Content hash
- d3152720987d7d43dc6873284ecc4a0d4903dcc4e3c56b9cb0967d76fe515902
- Published at
- 2026-11-06T10:16:37.403
- Euvd updated
- 2026-11-06T09:30:48+00:00
- Last modified
- 2026-11-06T21:15:29.947
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph