CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. Its EPSS score suggests a 11.9% probability of exploitation in the next 30 days. It may be remotely exploitable. It involves a SQL injection risk.
CVE
CVE-2025-26086
Severity
HIGH
CVSS
7.5
EPSS
11.90%
Original NVD Description
An unauthenticated blind SQL injection vulnerability exists in RSI Queue Management System v3.0 within the TaskID parameter of the get request handler. Attackers can remotely inject time-delayed SQL payloads to induce server response delays, enabling time-based inference and iterative extraction of sensitive database contents without authentication.