CVE-2026-25405

eRoom versions up to 1.7.1 are vulnerable to a SQL Injection flaw that allows attackers to manipulate database queries, potentially leading to unauthorized data access or modification. Organizations using this software should prioritize remediation efforts due to the high severity rating, as exploitation could result in significant data breaches or integrity issues.