HIGH 8.7 NVD

CVE-2026-123087

SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JSON object containing user-supplied information and concatenate

SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JSON object containing user-supplied information and concatenates it into an SQL statement without properly sanitising the input. This allows the original query to be altered via malicious input, causing the database to return unexpected information.

References

https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-atmiras-sirec

Published: 2026-11-06 · Source: NVD · Feed updated: 2026-11-07

This high severity vulnerability with a CVSS score of 8.7 was published on 2026-11-06 via NVD.

vulnfeed aggregates 16326 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.