VULNERABILITY INTELLIGENCE

CVE-2026-33615

CVSS score9.1 CRITICAL

EPSS probability0.42%

CISA KEVNot currently listed

Published2026-04-02

Last modified2026-10-26

Description

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPDATE command. This can result in a total loss of integrity and availability.