OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-42417

CRITICAL · CVSS 9.3

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

ARMember Premium versions up to 7.8 are susceptible to an unauthenticated SQL injection vulnerability, allowing attackers to execute arbitrary SQL queries on the database. This critical flaw can lead to unauthorized data access, data manipulation, or even complete system compromise. Organizations using affected versions should prioritize immediate patching to mitigate potential exploitation risks.

CVE
CVE-2026-42417
Severity
CRITICAL
CVSS
9.3
EPSS
N/A

Original NVD Description

Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions.