EUVD-2026-70369

ID: EUVD-2026-70369

Severity: high

CVSS v4: 8.6 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N)

CVSS v3: Not provided

CWE: None listed

Source: ENISA

Description

SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and information to be extracted from the database using SQL injection techniques.

Timestamps

Normalized: 2026-09-03T11:13:06Z UTC
Last updated: 2026-09-03T11:13:06Z UTC

References

No references provided.

VulnAI

EUVD-2026-70369

Description

Timestamps

References