VULNERABILITY INTELLIGENCE

CVE-2025-56699

CVSS score5.4 MEDIUM

EPSS probability0.28%

CISA KEVNot currently listed

Published2025-10-16

Last modified2026-06-17

Description

SQL injection vulnerability in the cmd component of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows an unauthenticated user to execute arbitrary SQL commands via the sender parameter.