EUVD-2026-33612

ID: EUVD-2026-33612

Severity: high

CVSS v4: 8.7 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N)

CVSS v3: Not provided

CWE: None listed

Source: ENISA

Description

SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters. Attacker with low privileges can inject arbitrary SQL commands, potentially gaining full control over the database. This issue affects SOPlanning version 1.55 and below.

Timestamps

Normalized: 2026-06-01T10:08:17Z UTC
Last updated: 2026-06-01T10:08:17Z UTC

References

No references provided.

VulnAI

EUVD-2026-33612

Description

Timestamps

References