Vulnerabilities CVE-2026-25606

CVE-2026-25606

High

Open

TLP:CLEAR

SQL Injection in STER

NVD CVE.org

Data Exfiltration

AI Analysis

No AI analysis yet.

Description

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the application itself is able to access This issue was fixed in version 9.5.

Details

CVSS Score: 8.7
EPSS Score ⓘ: 0.22%

13.3th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Confidence: 90%
Published: May 22, 2026
Last Modified: May 22, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.