CVE-2026-28142

Web Directory Free versions up to 1.7.13 are vulnerable to an unauthenticated SQL injection, allowing attackers to execute arbitrary SQL commands on the database. This critical vulnerability could lead to data leakage, unauthorized access, or complete system compromise. Organizations using this software should prioritize immediate remediation to mitigate potential exploitation risks.