AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-13850

CRITICAL · CVSS 9.8 EPSS 1.18%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-07-10 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2018-13850
Severity
CRITICAL
CVSS
9.8
EPSS
1.18%

Original NVD Description

The "Firebase Cloud Messaging (FCM) + Advance Admin Panel" component supporting Firebase Push Notification on iOS (through 2017-10-26) allows SQL injection via the /advance_push/public/login username parameter.