AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-26582

CRITICAL · CVSS 9.8 EPSS 0.56%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-10-25 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It involves a SQL injection risk. Exploitation may require the attacker to be authenticated.

CVE
CVE-2023-26582
Severity
CRITICAL
CVSS
9.8
EPSS
0.56%

Original NVD Description

Unauthenticated SQL injection in the GetExcursionDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2023-27377 HIGH CVE-2023-27376 HIGH CVE-2023-27375 HIGH CVE-2023-27262 CRITICAL CVE-2023-27261 MEDIUM CVE-2023-27260 CRITICAL